General
- Target 2026-07-09_99740e616c7bc51e7bcbb8c7993b45a3_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.3MB
- Sample260709-frffhsdw7s
- SHA256 456353d4e9c2f16d22f8603d75ffd6cf78ea0fc4e48ab8dec22e402e242022a7
- MD5 99740e616c7bc51e7bcbb8c7993b45a3
- SHA1 ee77ba19a8175a4343ec542f692fbf4e6e6e0ea4
- SHA512 d73892065c9875ca74348299535144b5f82c665b4c64fcdbeb7bb7d663f64c99c1afa7b8775f0e5e1fa35fb6a559ddb4e5542fb99fd926c6893b9296dee1f35e
- SSDEEP 24576:WvMdNavR8ANsfPvc6LZl6K8PWKCmW3AsqjnhMgeiCl7G0nehbGZpbD:davRTKf1o1Cb8Dmg27RnWGj
- TLSH T13F55C05977E802F5E177D139CA558A56F6B3B805072097CB03E44BBA6F237E04A3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_99740e616c7bc51e7bcbb8c7993b45a3_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_99740e616c7bc51e7bcbb8c7993b45a3_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_99740e616c7bc51e7bcbb8c7993b45a3_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.3MB
- SHA256 456353d4e9c2f16d22f8603d75ffd6cf78ea0fc4e48ab8dec22e402e242022a7
- MD5 99740e616c7bc51e7bcbb8c7993b45a3
- SHA1 ee77ba19a8175a4343ec542f692fbf4e6e6e0ea4
- SHA512 d73892065c9875ca74348299535144b5f82c665b4c64fcdbeb7bb7d663f64c99c1afa7b8775f0e5e1fa35fb6a559ddb4e5542fb99fd926c6893b9296dee1f35e
- SSDEEP 24576:WvMdNavR8ANsfPvc6LZl6K8PWKCmW3AsqjnhMgeiCl7G0nehbGZpbD:davRTKf1o1Cb8Dmg27RnWGj
- TLSH T13F55C05977E802F5E177D139CA558A56F6B3B805072097CB03E44BBA6F237E04A3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.