General
- Target 2026-07-12_6d98d60fe99a949e3190d61cff55cf13_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 632KB
- Sample260712-p3dkqsas3k
- SHA256 cc8b058e850e53ca7d860a3d52181f1157007b8f6639a98be6424f380d90708a
- MD5 6d98d60fe99a949e3190d61cff55cf13
- SHA1 72fbae33178fa0f46154777d65d82cc6dd0561be
- SHA512 eb4ee1ffd8bbf60b8e217ebff7fcc0c4756f0eb7da33e2bdc326c54f2c2ad34ae44792e13ba5d5d3d64b1acd76572d6de7b3dbf07906fde99d44a7875cf40e12
- SSDEEP 6144:1RC73KwQhMICsEzdGR+xQvVgEBYd0iKQPqv+PSZ++HlyV+WlnJXdbCuSnF683+rz:1cVQ2QEzcR+xQqgmSIslyFlJNmH3+rt
- TLSH T1FBD46B66F3A414F8E5B7D278C9660942E772BC150760DBCF13A0466A2F23BD09E3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_6d98d60fe99a949e3190d61cff55cf13_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_6d98d60fe99a949e3190d61cff55cf13_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_6d98d60fe99a949e3190d61cff55cf13_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 632KB
- SHA256 cc8b058e850e53ca7d860a3d52181f1157007b8f6639a98be6424f380d90708a
- MD5 6d98d60fe99a949e3190d61cff55cf13
- SHA1 72fbae33178fa0f46154777d65d82cc6dd0561be
- SHA512 eb4ee1ffd8bbf60b8e217ebff7fcc0c4756f0eb7da33e2bdc326c54f2c2ad34ae44792e13ba5d5d3d64b1acd76572d6de7b3dbf07906fde99d44a7875cf40e12
- SSDEEP 6144:1RC73KwQhMICsEzdGR+xQvVgEBYd0iKQPqv+PSZ++HlyV+WlnJXdbCuSnF683+rz:1cVQ2QEzcR+xQqgmSIslyFlJNmH3+rt
- TLSH T1FBD46B66F3A414F8E5B7D278C9660942E772BC150760DBCF13A0466A2F23BD09E3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Downloads MZ/PE file
-
Executes dropped EXE