Analysis
- max time kernel
148s - max time network
18s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 06:05
Behavioral task
behavioral1
Sample
2026-07-17_dcfb16c06628255ef911c14b6975054b_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_dcfb16c06628255ef911c14b6975054b_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-17_dcfb16c06628255ef911c14b6975054b_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 6.6MB
- Sample260717-gtb2jsb18n
- SHA256 5cc2da20816bbaf5de4478071538f17ba0ecf7d7af0c2717619481b0a296b4c5
- MD5 dcfb16c06628255ef911c14b6975054b
- SHA1 75e74d520322e290563c9ebfc86ae2a7df66713c
- SHA512 0f8556397322383763fecea57b8054ea78c792edfbbdfa9cef1a472272e72e9b14e46adb3a748a8a83f8c885a648987685ee07caf85c9765d7990e54c481f0a7
- SSDEEP 98304:VVs6PzaV2MsU3sTvT/O0k5V4ql1PkJth0U7OhgT:rPzaVXzu0+M
- TLSH T19A66CF9AA26222E4C07AC4349523F23BF5713C598378A7DB77C66F473B666D0A53E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables packed with VMProtect. 1 IoCs
resource yara_rule behavioral2/memory/2688-0-0x00007FF6BCCF0000-0x00007FF6BD397000-memory.dmp INDICATOR_EXE_Packed_VMProtect -
resource yara_rule behavioral2/memory/2688-0-0x00007FF6BCCF0000-0x00007FF6BD397000-memory.dmp vmprotect
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-17_dcfb16c06628255ef911c14b6975054b_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-17_dcfb16c06628255ef911c14b6975054b_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵PID:2688