General
- Target 2026-07-22_646b98b11ae17a220a67f737cfc74d69_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 317KB
- Sample260722-175essch27
- SHA256 13d708944a267458ab16a5e734c01a277a3f3cbe461e790c8c18d11d305186b0
- MD5 646b98b11ae17a220a67f737cfc74d69
- SHA1 89da577811f65c0b26cdcfc8f3ca598752fbed22
- SHA512 7470fc08f516fb822770e5352b9ea7d9abe0fdbccf2e76e9b4440180ab5b49036013a8c939ab8552268a39f903150181981033b6a36cd2ef85909a7edaa66e75
- SSDEEP 6144:OQ8OyYvc36AVuc7DQd/5zlgBR4JDoyelbSjyr9W:Oj16Qu15yBRCDb5yrk
- TLSH T134648D5AF3A814F9F977923CC8529507E772BC160760D78F27A0466A3F236A09D3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_646b98b11ae17a220a67f737cfc74d69_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_646b98b11ae17a220a67f737cfc74d69_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_646b98b11ae17a220a67f737cfc74d69_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 317KB
- SHA256 13d708944a267458ab16a5e734c01a277a3f3cbe461e790c8c18d11d305186b0
- MD5 646b98b11ae17a220a67f737cfc74d69
- SHA1 89da577811f65c0b26cdcfc8f3ca598752fbed22
- SHA512 7470fc08f516fb822770e5352b9ea7d9abe0fdbccf2e76e9b4440180ab5b49036013a8c939ab8552268a39f903150181981033b6a36cd2ef85909a7edaa66e75
- SSDEEP 6144:OQ8OyYvc36AVuc7DQd/5zlgBR4JDoyelbSjyr9W:Oj16Qu15yBRCDb5yrk
- TLSH T134648D5AF3A814F9F977923CC8529507E772BC160760D78F27A0466A3F236A09D3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application