General
- Target 2026-07-10_a69a9be942bb8060a2bca7b228c58b49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 943KB
- Sample260710-l9vaaaat4t
- SHA256 2496da7a09e2bc4385e97d019963df9830bf2b5d8bbb9d4d8d818e0eea4442bd
- MD5 a69a9be942bb8060a2bca7b228c58b49
- SHA1 57ce80c86a76c3845e625b6141851c3c53a0bbd8
- SHA512 f1336e23ea6e55c0ff295dac607ff2fda9636e436438a03c46e6db0ff2e71887da0eb6af4f98920fe8ae3810b779be0bfd50e03d2fecb1f33c1910c8fc353b0c
- SSDEEP 24576:uQ4tYp58I1VQjw9f4boY60wtj1j0oWIxsstwNbOCswo9Yeb1ll0M:rQg8I1yjw9f4boY60wtjFxJt2LFaYe
- TLSH T122253B6DA66C00A5E5B9D17CCB83651BE1F3740103724AEF03964B4A7F2BAF4563AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_a69a9be942bb8060a2bca7b228c58b49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_a69a9be942bb8060a2bca7b228c58b49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_a69a9be942bb8060a2bca7b228c58b49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 943KB
- SHA256 2496da7a09e2bc4385e97d019963df9830bf2b5d8bbb9d4d8d818e0eea4442bd
- MD5 a69a9be942bb8060a2bca7b228c58b49
- SHA1 57ce80c86a76c3845e625b6141851c3c53a0bbd8
- SHA512 f1336e23ea6e55c0ff295dac607ff2fda9636e436438a03c46e6db0ff2e71887da0eb6af4f98920fe8ae3810b779be0bfd50e03d2fecb1f33c1910c8fc353b0c
- SSDEEP 24576:uQ4tYp58I1VQjw9f4boY60wtj1j0oWIxsstwNbOCswo9Yeb1ll0M:rQg8I1yjw9f4boY60wtjFxJt2LFaYe
- TLSH T122253B6DA66C00A5E5B9D17CCB83651BE1F3740103724AEF03964B4A7F2BAF4563AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.