General
- Target 2026-07-05_d33615f1117a195d16faa51c49eb5d2b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- Sample260705-l4deksfs4n
- SHA256 671fe0403c070f044ca11cbc2526b04713d5700d07b25d8d68bef62b071e8862
- MD5 d33615f1117a195d16faa51c49eb5d2b
- SHA1 2f2faf00f690059fdc3021bf11443e4624a544fc
- SHA512 07f71ac175dc070599a6a3cfdec2a8235b6f48ecc1539469fdbdf75b5b4531d44cbc308b7ff34ec4095812145186fc75de33b6da97f70c8095e0cf12fd37e7c0
- SSDEEP 49152:I+E2PwDnhkg+O2KB0tCQWOwYOW+emDijNKDOopx1PVqw9:zD2jDrNJ
- TLSH T183859F22EBA401FDD5B7D1F88A669507E7B278460330EEDF039056662F277E44A3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_d33615f1117a195d16faa51c49eb5d2b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_d33615f1117a195d16faa51c49eb5d2b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_d33615f1117a195d16faa51c49eb5d2b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- SHA256 671fe0403c070f044ca11cbc2526b04713d5700d07b25d8d68bef62b071e8862
- MD5 d33615f1117a195d16faa51c49eb5d2b
- SHA1 2f2faf00f690059fdc3021bf11443e4624a544fc
- SHA512 07f71ac175dc070599a6a3cfdec2a8235b6f48ecc1539469fdbdf75b5b4531d44cbc308b7ff34ec4095812145186fc75de33b6da97f70c8095e0cf12fd37e7c0
- SSDEEP 49152:I+E2PwDnhkg+O2KB0tCQWOwYOW+emDijNKDOopx1PVqw9:zD2jDrNJ
- TLSH T183859F22EBA401FDD5B7D1F88A669507E7B278460330EEDF039056662F277E44A3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.