General
- Target 2026-07-20_c1732d555fff3cbf01ccb6f1df3aef82_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 735KB
- Sample260720-c35m1acx9k
- SHA256 469a48314c3b64f86b2a4d690331c200775e9f4f7893bcca84cb7e646a884a71
- MD5 c1732d555fff3cbf01ccb6f1df3aef82
- SHA1 31dec2fd1b397c20ed88413363bf2e01bda866ae
- SHA512 1980481271c87840f1519d8038dc13356d8735d7142eaaca8b63219b94929705e8b13faf73f97b32e107aaea05a3118bab232c05be5ca16e5a4ce73f0ca557c3
- SSDEEP 12288:Y+nOGj4MzkLBT9qS7Sie9/rdI7Vilsmob72LOV9DpCG:Dj4MzkL+I7glsJbKLy9DpCG
- TLSH T10FF44B1762A902FCE0BBE17C99165A42E779B81B03B19EDF03D006622F976E49F3D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_c1732d555fff3cbf01ccb6f1df3aef82_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_c1732d555fff3cbf01ccb6f1df3aef82_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_c1732d555fff3cbf01ccb6f1df3aef82_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 735KB
- SHA256 469a48314c3b64f86b2a4d690331c200775e9f4f7893bcca84cb7e646a884a71
- MD5 c1732d555fff3cbf01ccb6f1df3aef82
- SHA1 31dec2fd1b397c20ed88413363bf2e01bda866ae
- SHA512 1980481271c87840f1519d8038dc13356d8735d7142eaaca8b63219b94929705e8b13faf73f97b32e107aaea05a3118bab232c05be5ca16e5a4ce73f0ca557c3
- SSDEEP 12288:Y+nOGj4MzkLBT9qS7Sie9/rdI7Vilsmob72LOV9DpCG:Dj4MzkL+I7glsJbKLy9DpCG
- TLSH T10FF44B1762A902FCE0BBE17C99165A42E779B81B03B19EDF03D006622F976E49F3D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1