General
- Target 2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 5.7MB
- Sample260708-eqcskabs5m
- SHA256 cf0031983c6403f498131423edb809378c615fd65d50cf353baa04e53ce9338c
- MD5 da7dac4bd67b06f3105a3ef170e50bbc
- SHA1 a8f3c7971df0544b705e8424cc9aab711471a920
- SHA512 53373d0c70f31d3a08b50085b262f5afdc693016496fa47b59cfc25dc3e62b96fe71557f17184e02849f95ee7661e2154e6b40ae5eeebd8fdfeeb2c014305ec6
- SSDEEP 98304:0jysHjgk1+0aA91L775WtNBlLO03A7eh/:0jNHjgk1+0as1LXktdK0wK/
- TLSH T186569D1BB69901ECE12BA03885576A0BD2767409233063EF639555613FEBBE07BBF305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 5.7MB
- SHA256 cf0031983c6403f498131423edb809378c615fd65d50cf353baa04e53ce9338c
- MD5 da7dac4bd67b06f3105a3ef170e50bbc
- SHA1 a8f3c7971df0544b705e8424cc9aab711471a920
- SHA512 53373d0c70f31d3a08b50085b262f5afdc693016496fa47b59cfc25dc3e62b96fe71557f17184e02849f95ee7661e2154e6b40ae5eeebd8fdfeeb2c014305ec6
- SSDEEP 98304:0jysHjgk1+0aA91L775WtNBlLO03A7eh/:0jNHjgk1+0as1LXktdK0wK/
- TLSH T186569D1BB69901ECE12BA03885576A0BD2767409233063EF639555613FEBBE07BBF305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE