Analysis
- max time kernel
148s - max time network
138s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
13/07/2026, 00:13
General
- Target 2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 1.7MB
- Sample260713-ah2phaas9m
- SHA256 de56156dd3e1b4a720ac9257d07fe88e4db5d3fd075a0cc54d306cc0dd951352
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6496-0-0x00007FF70E054000-0x00007FF70E055000-memory.dmp
memory/6496-1-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-2-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-5-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-4-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-3-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-6-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-7-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-8-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-9-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-10-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-11-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-12-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-13-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-14-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-15-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-16-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-17-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-18-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-19-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-20-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp
memory/6496-21-0x00007FF70DFB0000-0x00007FF70E141000-memory.dmp