General
- Target 2026-07-11_699de98f851bf242fe5f40260e3bf8dd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 40.5MB
- Sample260711-dhfc2sc16v
- SHA256 a09fb2cfcf9e822e4ea38683493ddff9db14ac78e1d14600aeff25f299065afe
- MD5 699de98f851bf242fe5f40260e3bf8dd
- SHA1 9bf4ff710b27eedf92faac701160ac71c4d2ccaf
- SHA512 79bfbac00a00b0730102192e7b06bb5fcdd338a424faac1c9c11faeb98c155872b8ba42ce17e578245e19fc9b30383dbb06bdf26290dcc94db56e7fa0253bbad
- SSDEEP 786432:TXROljVmGtRy1TGfw/JL/tsGAxpe+k4dYATGyWpzy3t16Q9AzfY:zwaG+1CUFAxpeNuhAzy3f6Q9Azg
- TLSH T14D973334BAA212BFE1E3E7734E22C53DEA217D583662411A27D85F42BB136488F57770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_699de98f851bf242fe5f40260e3bf8dd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_699de98f851bf242fe5f40260e3bf8dd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_699de98f851bf242fe5f40260e3bf8dd_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 40.5MB
- SHA256 a09fb2cfcf9e822e4ea38683493ddff9db14ac78e1d14600aeff25f299065afe
- MD5 699de98f851bf242fe5f40260e3bf8dd
- SHA1 9bf4ff710b27eedf92faac701160ac71c4d2ccaf
- SHA512 79bfbac00a00b0730102192e7b06bb5fcdd338a424faac1c9c11faeb98c155872b8ba42ce17e578245e19fc9b30383dbb06bdf26290dcc94db56e7fa0253bbad
- SSDEEP 786432:TXROljVmGtRy1TGfw/JL/tsGAxpe+k4dYATGyWpzy3t16Q9AzfY:zwaG+1CUFAxpeNuhAzy3f6Q9Azg
- TLSH T14D973334BAA212BFE1E3E7734E22C53DEA217D583662411A27D85F42BB136488F57770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL