General
- Target 2026-07-08_a0ba93ffefcf6d034e724f783b3ffd08_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.5MB
- Sample260708-3rgd5sbv71
- SHA256 f7585325b199d33d3dbf4651694d3b355cd686140d6bc3059a058377271c0f19
- MD5 a0ba93ffefcf6d034e724f783b3ffd08
- SHA1 a3e074302d3452cccd04beb63c798453be23acf9
- SHA512 d248cabf0eda1c382be93b8c2bd814440f1a18a9c5c28069658c7b33b75983f5a6232fba5b85399219c3573d138c6ec11b870dada5eddca195a4f51fa53efd5a
- SSDEEP 24576:LTh9vhB1dz5sqjnhMgeiCl7G0nehbGZpbD:bZB3z9Dmg27RnWGj
- TLSH T18A75E15AB26810E9D83BC17CCA83D60BEB763C1147309ADB17A096AA3F376D45E3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_a0ba93ffefcf6d034e724f783b3ffd08_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_a0ba93ffefcf6d034e724f783b3ffd08_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_a0ba93ffefcf6d034e724f783b3ffd08_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.5MB
- SHA256 f7585325b199d33d3dbf4651694d3b355cd686140d6bc3059a058377271c0f19
- MD5 a0ba93ffefcf6d034e724f783b3ffd08
- SHA1 a3e074302d3452cccd04beb63c798453be23acf9
- SHA512 d248cabf0eda1c382be93b8c2bd814440f1a18a9c5c28069658c7b33b75983f5a6232fba5b85399219c3573d138c6ec11b870dada5eddca195a4f51fa53efd5a
- SSDEEP 24576:LTh9vhB1dz5sqjnhMgeiCl7G0nehbGZpbD:bZB3z9Dmg27RnWGj
- TLSH T18A75E15AB26810E9D83BC17CCA83D60BEB763C1147309ADB17A096AA3F376D45E3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.