General
- Target 2026-07-07_8a2dab84e49a7a1579155e885195b659_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 2.1MB
- Sample260707-nybpxaes3k
- SHA256 addbe4530a8e2f8568f732a1c4704a7d7d4c2e133a328a6b72268879e273d082
- MD5 8a2dab84e49a7a1579155e885195b659
- SHA1 bdbfac4f1832c00cae72b2ff261d55cf04a6d67e
- SHA512 3d03f148e89146aa4eaaec2c914a22b0cca761adaa8717222b9e54811b1a3826be23c90953f58f6965eaacaa1f1ae88ee116a7025233fce97d847f506ec0690f
- SSDEEP 49152:qMsj88qWGLAwIzfd1I1dC0LCuqSXcAaQO6g91:xsj8j0wUk+qx1W91
- TLSH T182A5224473481CF9E9B7853E8802C169D371BC264354DA9B43F89A7B3F172A26E3E791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_8a2dab84e49a7a1579155e885195b659_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_8a2dab84e49a7a1579155e885195b659_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_8a2dab84e49a7a1579155e885195b659_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 2.1MB
- SHA256 addbe4530a8e2f8568f732a1c4704a7d7d4c2e133a328a6b72268879e273d082
- MD5 8a2dab84e49a7a1579155e885195b659
- SHA1 bdbfac4f1832c00cae72b2ff261d55cf04a6d67e
- SHA512 3d03f148e89146aa4eaaec2c914a22b0cca761adaa8717222b9e54811b1a3826be23c90953f58f6965eaacaa1f1ae88ee116a7025233fce97d847f506ec0690f
- SSDEEP 49152:qMsj88qWGLAwIzfd1I1dC0LCuqSXcAaQO6g91:xsj8j0wUk+qx1W91
- TLSH T182A5224473481CF9E9B7853E8802C169D371BC264354DA9B43F89A7B3F172A26E3E791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.