General
- Target 2026-07-10_85ba3967932685238df17fb5260d4acc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.9MB
- Sample260710-yre4vsax9s
- SHA256 fdaf154269fa138235827f9350dd6309f0a618271fa67aaed8862740f1c8e8cc
- MD5 85ba3967932685238df17fb5260d4acc
- SHA1 604a575f590d518b40feef6b90390219ab1294ec
- SHA512 ba2ba591f221380d9272ca66f87a4f8fda75b753fdbaba2e2a411b9d80047d9aa02052ab979b7c72389be178ead7ee45f5650256733919406af770c710da1b56
- SSDEEP 24576:P05jdHYNb7rqFThrsD4WeYpeUMH/KOfstbokJMxqavDTWLyvt487diDxRh60sY:8LTrs8NYoJfDUod1vDyLyh7m
- TLSH T17895AE2BF1208AE8D0DEC0B8589B96A29B307C25077513C715DA1B9B1F77DD01E3EB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-10_85ba3967932685238df17fb5260d4acc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_85ba3967932685238df17fb5260d4acc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_85ba3967932685238df17fb5260d4acc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.9MB
- SHA256 fdaf154269fa138235827f9350dd6309f0a618271fa67aaed8862740f1c8e8cc
- MD5 85ba3967932685238df17fb5260d4acc
- SHA1 604a575f590d518b40feef6b90390219ab1294ec
- SHA512 ba2ba591f221380d9272ca66f87a4f8fda75b753fdbaba2e2a411b9d80047d9aa02052ab979b7c72389be178ead7ee45f5650256733919406af770c710da1b56
- SSDEEP 24576:P05jdHYNb7rqFThrsD4WeYpeUMH/KOfstbokJMxqavDTWLyvt487diDxRh60sY:8LTrs8NYoJfDUod1vDyLyh7m
- TLSH T17895AE2BF1208AE8D0DEC0B8589B96A29B307C25077513C715DA1B9B1F77DD01E3EB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Enigma
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.