General
- Target 2026-07-09_391bf01535543a041cb59bdd4f54934e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.5MB
- Sample260709-kpetesfv4r
- SHA256 e1bc96e7d91794ae71384888275a4dc3423f2cade46d77eafe7eeb9cd52b410c
- MD5 391bf01535543a041cb59bdd4f54934e
- SHA1 a8307db5689454d9893476b176fc17faa831b85f
- SHA512 bc01f43c1734221355bfe3f836c18dc010005ab74de0c698642dc56eecc15449cf04136bcb5166508530b72a414a9cf05cb4388ed4095bf77e37b6fbcb1e5ecd
- SSDEEP 196608:JzZiqelLLPF7aYYyp0STbzxBqLOCdUfIDpryWyz7Cb5aiqbkR:jiblLZe4pvzHMOkzgz7GMFs
- TLSH T16696334AEBD409F8E1A7E278CE06C945D372BC9E5725878F13D15A615F632A0CF3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_391bf01535543a041cb59bdd4f54934e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_391bf01535543a041cb59bdd4f54934e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_391bf01535543a041cb59bdd4f54934e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.5MB
- SHA256 e1bc96e7d91794ae71384888275a4dc3423f2cade46d77eafe7eeb9cd52b410c
- MD5 391bf01535543a041cb59bdd4f54934e
- SHA1 a8307db5689454d9893476b176fc17faa831b85f
- SHA512 bc01f43c1734221355bfe3f836c18dc010005ab74de0c698642dc56eecc15449cf04136bcb5166508530b72a414a9cf05cb4388ed4095bf77e37b6fbcb1e5ecd
- SSDEEP 196608:JzZiqelLLPF7aYYyp0STbzxBqLOCdUfIDpryWyz7Cb5aiqbkR:jiblLZe4pvzHMOkzgz7GMFs
- TLSH T16696334AEBD409F8E1A7E278CE06C945D372BC9E5725878F13D15A615F632A0CF3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.