General
- Target 2026-07-17_3e918301b2699a1f7b14b37a6690982c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 965KB
- Sample260717-j377fsfs7k
- SHA256 1b216d9e333d3f4f4bbb3ca956600dbe3e536669b56c3feac2290cd182b0b051
- MD5 3e918301b2699a1f7b14b37a6690982c
- SHA1 c55daa08607300b5b97fed1346a2d819fc7c9407
- SHA512 3884e5d7efcda9a8e820ea73e5fbdda233b04ef06e7f0f4d473f611e88e08a1f43f918f4a64ee15922085acf287ed164b5360847612afc0006bb92e28b5d2aae
- SSDEEP 24576:0/CGmYbDQcfzkAnl9tpdAXXP/qw2l+CbyOfD:0aGmYbDvfzkAnVAXXHqwi1fD
- TLSH T13525BF29D152A2EAFD26407A84A16165B5327A37C63C2FFF4390E3335E0BBC51F29758
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_3e918301b2699a1f7b14b37a6690982c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://t.me/vstalnasral555
-
https://shoresolfe.live/ysbt
-
https://narrathfpt.top/tekq
-
https://escczlv.top/bufi
-
https://caitraohvi.bet/adks
-
https://galijd.shop/anbf
-
https://ordntx.top/pxla
-
https://strejqt.bet/mbnj
-
https://citellcagt.top/gjtu
-
https://maxmtsq.bet/xzid
Attributes
-
build_id
c7b18c1aef8c42df42db006a658468ed968ee65c85eb8068a5
Targets
-
- Target 2026-07-17_3e918301b2699a1f7b14b37a6690982c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 965KB
- SHA256 1b216d9e333d3f4f4bbb3ca956600dbe3e536669b56c3feac2290cd182b0b051
- MD5 3e918301b2699a1f7b14b37a6690982c
- SHA1 c55daa08607300b5b97fed1346a2d819fc7c9407
- SHA512 3884e5d7efcda9a8e820ea73e5fbdda233b04ef06e7f0f4d473f611e88e08a1f43f918f4a64ee15922085acf287ed164b5360847612afc0006bb92e28b5d2aae
- SSDEEP 24576:0/CGmYbDQcfzkAnl9tpdAXXP/qw2l+CbyOfD:0aGmYbDvfzkAnVAXXHqwi1fD
- TLSH T13525BF29D152A2EAFD26407A84A16165B5327A37C63C2FFF4390E3335E0BBC51F29758
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of SetThreadContext