General
- Target 2026-07-09_d5d2a9e66b41f3cf5ee1b9d9743e7472_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 879KB
- Sample260709-a1hpcaa13q
- SHA256 216adff52f5a29494751fad898b2dc9a97788c6ae680f1d6c539211f1cc89ebd
- MD5 d5d2a9e66b41f3cf5ee1b9d9743e7472
- SHA1 f30be445a8eaec2a44b628d64a93683b20b93fc2
- SHA512 65a9cca3f0a78eefc021240ab5c57cc83697e7201766f0682fad84bd05d9154714a2c162973253b48de4d7bf43ef933d2784c77c1ee6c5518035dfe9d456e975
- SSDEEP 24576:54DsQ2GqVgfa30QGN8IWjZmJoqabbZ2XdrCp0:54Dgxmfa30QBIpoEdri0
- TLSH T15415CF1E2A462079EA778135C5870752AA32B5B547346EFF02BEC3311E376E81F7A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_d5d2a9e66b41f3cf5ee1b9d9743e7472_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_d5d2a9e66b41f3cf5ee1b9d9743e7472_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_d5d2a9e66b41f3cf5ee1b9d9743e7472_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 879KB
- SHA256 216adff52f5a29494751fad898b2dc9a97788c6ae680f1d6c539211f1cc89ebd
- MD5 d5d2a9e66b41f3cf5ee1b9d9743e7472
- SHA1 f30be445a8eaec2a44b628d64a93683b20b93fc2
- SHA512 65a9cca3f0a78eefc021240ab5c57cc83697e7201766f0682fad84bd05d9154714a2c162973253b48de4d7bf43ef933d2784c77c1ee6c5518035dfe9d456e975
- SSDEEP 24576:54DsQ2GqVgfa30QGN8IWjZmJoqabbZ2XdrCp0:54Dgxmfa30QBIpoEdri0
- TLSH T15415CF1E2A462079EA778135C5870752AA32B5B547346EFF02BEC3311E376E81F7A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.