General
- Target 2026-07-09_0cae47eaf4b366cb9fe9c7c082366de0_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc_vidar
- Size 2.2MB
- Sample260709-m5lb9ahs4p
- SHA256 a5e903f9d2682c87944579756174290ed71b2b33014e72d8bd1a1c1b75e44387
- MD5 0cae47eaf4b366cb9fe9c7c082366de0
- SHA1 f9a3f30f72afa35db036cd10c82f4b05cb20a14e
- SHA512 07f99f072592573d805883e19fe262fa949ac42f6c4a85767f7724237a4dd0a4658ac2e18f9a11739c86f8acff77ed22f6118196225179753069d15d1b474b70
- SSDEEP 49152:kKmHDfsSCgIrYx2BXbVSTJeV5nOqSnk5P7HAqSBFnCEHGK:fM0LbuuORk5TgZBlCEmK
- TLSH T1BDB5BE465AD90277E1E7D7788C92124AF7B47B510738D78B03AA0266AB335FC4E7E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_0cae47eaf4b366cb9fe9c7c082366de0_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_0cae47eaf4b366cb9fe9c7c082366de0_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_0cae47eaf4b366cb9fe9c7c082366de0_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc_vidar
- Size 2.2MB
- SHA256 a5e903f9d2682c87944579756174290ed71b2b33014e72d8bd1a1c1b75e44387
- MD5 0cae47eaf4b366cb9fe9c7c082366de0
- SHA1 f9a3f30f72afa35db036cd10c82f4b05cb20a14e
- SHA512 07f99f072592573d805883e19fe262fa949ac42f6c4a85767f7724237a4dd0a4658ac2e18f9a11739c86f8acff77ed22f6118196225179753069d15d1b474b70
- SSDEEP 49152:kKmHDfsSCgIrYx2BXbVSTJeV5nOqSnk5P7HAqSBFnCEHGK:fM0LbuuORk5TgZBlCEmK
- TLSH T1BDB5BE465AD90277E1E7D7788C92124AF7B47B510738D78B03AA0266AB335FC4E7E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.