General
- Target 2026-07-04_c7323e49d7015a12233d5e713d7c685e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 9.7MB
- Sample260704-y97a3adv5w
- SHA256 7b8e9e73b6464917e1b2a421af1a0c967ff7abf7fc3886988bb138afe2705454
- MD5 c7323e49d7015a12233d5e713d7c685e
- SHA1 04d103015f420a2461b63682ef4123f7ab245480
- SHA512 4f00597f203503ff4137f9b5e20cf93b8f1770111e78e3e027531bb54ea8dd676d58ec83a0392a00ec257080160ec582eb6365c8657da9f9f34d53e715ffbe60
- SSDEEP 196608:JzvkD2sQHpfeH1dveBS3nE8eAmhp7sDtWLwMmBynZr19p:Vk6f8drnE+6nnZrp
- TLSH T1E5A63349EBA40DFCE1A2A674CC560613E777BC2D5362C6CF1B946A921F132A0CE7D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_c7323e49d7015a12233d5e713d7c685e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_c7323e49d7015a12233d5e713d7c685e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_c7323e49d7015a12233d5e713d7c685e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 9.7MB
- SHA256 7b8e9e73b6464917e1b2a421af1a0c967ff7abf7fc3886988bb138afe2705454
- MD5 c7323e49d7015a12233d5e713d7c685e
- SHA1 04d103015f420a2461b63682ef4123f7ab245480
- SHA512 4f00597f203503ff4137f9b5e20cf93b8f1770111e78e3e027531bb54ea8dd676d58ec83a0392a00ec257080160ec582eb6365c8657da9f9f34d53e715ffbe60
- SSDEEP 196608:JzvkD2sQHpfeH1dveBS3nE8eAmhp7sDtWLwMmBynZr19p:Vk6f8drnE+6nnZrp
- TLSH T1E5A63349EBA40DFCE1A2A674CC560613E777BC2D5362C6CF1B946A921F132A0CE7D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE