Analysis
- max time kernel
149s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/07/2026, 21:33
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-23_74f3a32ea4117eb6688d3eb870ea79ff_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
General
- Target 2026-07-23_74f3a32ea4117eb6688d3eb870ea79ff_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 410KB
- Sample260723-1ect3sdc45
- SHA256 67697bff5362b67e59ad848256feaa626a233274ff08a702bab3073732b1e0c0
- MD5 74f3a32ea4117eb6688d3eb870ea79ff
- SHA1 8e8b9fe5e75cb6dc5825ed61d360d9a3a1655587
- SHA512 e33ba1e246c9c06446f3136ef211d91e6d365ca5b82c783477d3d459dedc1010f745cf8535c9fa2481a44649017380287414f9586e023497dcd633bc4af96c6e
- SSDEEP 6144:wrCFuGeF7SsncR9klvkRS6E/9+9ECM8nXdPAKk2GfmdSzhJEs5vfHmu:UkIFuus9klvkRSPKM0PAKdGed2EoGu
- TLSH T12994D055BB9608FAED67823DC9824645EFB67C071720E69F43A0426B1F136A0DD3EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3772 2026-07-23_74f3a32ea4117eb6688d3eb870ea79ff_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 3772 2026-07-23_74f3a32ea4117eb6688d3eb870ea79ff_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-23_74f3a32ea4117eb6688d3eb870ea79ff_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-23_74f3a32ea4117eb6688d3eb870ea79ff_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3772