Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/07/2026, 01:25
Behavioral task
behavioral1
Sample
2026-07-05_843c7aa45cb8b6bbe0b37427ab6d214b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_843c7aa45cb8b6bbe0b37427ab6d214b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
General
- Target 2026-07-05_843c7aa45cb8b6bbe0b37427ab6d214b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 9.2MB
- Sample260705-btfrvaby2q
- SHA256 91cc8f6d7992d998e426de8bbc7c97d0e1cdd7f9fb4cd0888c3ccbb15f64d3e5
- MD5 843c7aa45cb8b6bbe0b37427ab6d214b
- SHA1 cb28fd727caf083fdc84308c7ceebce7c5fd5058
- SHA512 b74726536ce91c237c94c75f8a62c504a28da8494f138d4d9102da15a2750d6aeab653ec21925ffed4c533c40180bc40eb62f3ae26b45656f22aabd585ea175d
- SSDEEP 196608:UxF5gZIWM7ysA2a0o82NR3gotByfa9jwUvdhgEiXP:45g6w2a0OBMkjwUlheX
- TLSH T148A6D0AB12E5AEADD41AD0FDC1A6797F8B27B437051EBA878152219D9E33C533327700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables packed with Themida 1 IoCs
resource yara_rule behavioral1/memory/4052-0-0x0000000140000000-0x0000000140949000-memory.dmp INDICATOR_EXE_Packed_Themida -
resource yara_rule behavioral1/memory/4052-0-0x0000000140000000-0x0000000140949000-memory.dmp themida
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-05_843c7aa45cb8b6bbe0b37427ab6d214b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-05_843c7aa45cb8b6bbe0b37427ab6d214b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵PID:4052