General
- Target 2026-07-22_767595c107b874873a917856fb7644a3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.9MB
- Sample260722-3rd9sadf69
- SHA256 3d877c89d4dad263441b6197d1815ca95ac58818038eada113f3f41348c1dd6d
- MD5 767595c107b874873a917856fb7644a3
- SHA1 fd16619d192dfa4438c98d95faa5f77620029aa3
- SHA512 fe7f7bab68cf99ed77577c10ede9b6ed511e7d0ae37c7f21fa5d92d7889396003c99895027237415ac38a3de5d55c2dcb2d0be39b4dcebba8e0b26c1b602e26f
- SSDEEP 49152:Ci0BSWtOZvUrg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTq4WS1SZBnHTAsi:0tO8qRFTauXycNzAz
- TLSH T150167C06E6B940E4D0BBD13D8A969657FAB1385AC73197CB46A0875B1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_767595c107b874873a917856fb7644a3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_767595c107b874873a917856fb7644a3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.9MB
- SHA256 3d877c89d4dad263441b6197d1815ca95ac58818038eada113f3f41348c1dd6d
- MD5 767595c107b874873a917856fb7644a3
- SHA1 fd16619d192dfa4438c98d95faa5f77620029aa3
- SHA512 fe7f7bab68cf99ed77577c10ede9b6ed511e7d0ae37c7f21fa5d92d7889396003c99895027237415ac38a3de5d55c2dcb2d0be39b4dcebba8e0b26c1b602e26f
- SSDEEP 49152:Ci0BSWtOZvUrg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTq4WS1SZBnHTAsi:0tO8qRFTauXycNzAz
- TLSH T150167C06E6B940E4D0BBD13D8A969657FAB1385AC73197CB46A0875B1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1