General
- Target 2026-07-06_9c6f8d361bf42ede24b719c75a836784_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.4MB
- Sample260706-pwsfbafs9z
- SHA256 a4f7b5e74aeb504529ad603d6e7441ec8e284560377e2926f52ff60a70ef85c0
- MD5 9c6f8d361bf42ede24b719c75a836784
- SHA1 78a219c29c6f83e72c3c0699968b017920b8a450
- SHA512 c072397068e0d8f71789e609b839a64467bc02c045223c75f6c3f28470b3fef42feb6b00c54fbc99e2a1348dfe133c6f77ff8f07297a2a3593cf8413b93f86a9
- SSDEEP 12288:i/kTfVL+L7+UYXlROIDWXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wlh:qk67NY1AsqjnhMgeiCl7G0nehbGZpbD
- TLSH T1BC65011573A504FAE8778675C992C607E1337C114B34A99B47608973EF37A80AE3CB6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_9c6f8d361bf42ede24b719c75a836784_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_9c6f8d361bf42ede24b719c75a836784_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_9c6f8d361bf42ede24b719c75a836784_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.4MB
- SHA256 a4f7b5e74aeb504529ad603d6e7441ec8e284560377e2926f52ff60a70ef85c0
- MD5 9c6f8d361bf42ede24b719c75a836784
- SHA1 78a219c29c6f83e72c3c0699968b017920b8a450
- SHA512 c072397068e0d8f71789e609b839a64467bc02c045223c75f6c3f28470b3fef42feb6b00c54fbc99e2a1348dfe133c6f77ff8f07297a2a3593cf8413b93f86a9
- SSDEEP 12288:i/kTfVL+L7+UYXlROIDWXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wlh:qk67NY1AsqjnhMgeiCl7G0nehbGZpbD
- TLSH T1BC65011573A504FAE8778675C992C607E1337C114B34A99B47608973EF37A80AE3CB6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.