Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 22:46
Behavioral task
behavioral1
Sample
2026-07-17_5ee0981c2c4080c58005a3922f915238_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_5ee0981c2c4080c58005a3922f915238_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-07-17_5ee0981c2c4080c58005a3922f915238_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 6.0MB
- Sample260717-2qa1asf19j
- SHA256 a4feff9269fb71aaad3ee6c9d8c5000d6610468c6a4db732d4eae05f7ea49bb1
- MD5 5ee0981c2c4080c58005a3922f915238
- SHA1 dcd4d5d8c1bc4461781ae7a604b9253a55c1f857
- SHA512 d11badfd4c319c0cd2a49827758578c045e9321827094ee91781deb6996a8e85fcc4eb1933c46f23cfee09290d2237da1410418b9713cc8d0ac67dde2368d137
- SSDEEP 98304:tttZxCaV2Msk2+7sSIUAHa0MOhBb8uM8bkMgb5PB+4B+Amhdd:TXxCaVXBs7UA1S8StELAmTd
- TLSH T12756BE5B926562E4C47AC0389423751BF9B13859437897D773D6BB822BF2BE0E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables packed with VMProtect. 1 IoCs
resource yara_rule behavioral2/memory/872-0-0x00007FF6935C0000-0x00007FF693BD4000-memory.dmp INDICATOR_EXE_Packed_VMProtect -
resource yara_rule behavioral2/memory/872-0-0x00007FF6935C0000-0x00007FF693BD4000-memory.dmp vmprotect
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-17_5ee0981c2c4080c58005a3922f915238_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-17_5ee0981c2c4080c58005a3922f915238_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵PID:872