General
- Target 2026-07-20_290306908803462dde15a5890198db00_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 362KB
- Sample260720-mbdejsev5k
- SHA256 2cf5526efcb99a801e9f6e2484a08388c9a169700f9032b8f021343f95259820
- MD5 290306908803462dde15a5890198db00
- SHA1 b08bcc7f7c604e55d43507aa4566cd4b4610d472
- SHA512 7cae4e6989b0ee806c85e2fe49f6335b6ad644d6ae2372dc997a9d798400617515ca7efe38bf4e0115b8bf714225586f090e8609da8099350fd4bf79dfa5bf80
- SSDEEP 6144:BKkpDnWTHH7jWsxPRet5FTIFAFUg43xbzwPMxmOJqXGUYjJWlmLkx4b:5pb6n/et5FT4A+g41cMxmhc
- TLSH T196748D6AF79400F8E16BC17CC9625A13EBB27C99032096DF23E886561F637D09E3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_290306908803462dde15a5890198db00_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_290306908803462dde15a5890198db00_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_290306908803462dde15a5890198db00_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 362KB
- SHA256 2cf5526efcb99a801e9f6e2484a08388c9a169700f9032b8f021343f95259820
- MD5 290306908803462dde15a5890198db00
- SHA1 b08bcc7f7c604e55d43507aa4566cd4b4610d472
- SHA512 7cae4e6989b0ee806c85e2fe49f6335b6ad644d6ae2372dc997a9d798400617515ca7efe38bf4e0115b8bf714225586f090e8609da8099350fd4bf79dfa5bf80
- SSDEEP 6144:BKkpDnWTHH7jWsxPRet5FTIFAFUg43xbzwPMxmOJqXGUYjJWlmLkx4b:5pb6n/et5FT4A+g41cMxmhc
- TLSH T196748D6AF79400F8E16BC17CC9625A13EBB27C99032096DF23E886561F637D09E3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1