General
- Target 2026-07-23_43421e0147323b495e575977bbc38c1c_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 9.5MB
- Sample260723-wp7pzsstc1
- SHA256 7ba50f6575cb3f6912a2b298c50a77208fb92cfc80bb2611eb0d8d91d19a10fc
- MD5 43421e0147323b495e575977bbc38c1c
- SHA1 112fc376785056cc7d84c6eaf6214948ab2c2dca
- SHA512 80a39bd7faa0963fad53d5a84a5deb0b8b31a81c49099fc41ae43d30d7934c4acd7056449b0d0df7609aea574228e42d065b32e31b55f4a7ab126275ad29e44c
- SSDEEP 196608:TSffmWnXdQqPpLV7BPdSa7GN15qkZADm/N4zwl2+ClUNbRw:mWQdQ4LVGwDmF4zg2+UyRw
- TLSH T1C0A6D0BE8F7E53DAC1AAC5F0F57692C6B4107848A076A7C62BC0079D6727160ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_43421e0147323b495e575977bbc38c1c_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_43421e0147323b495e575977bbc38c1c_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_43421e0147323b495e575977bbc38c1c_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 9.5MB
- SHA256 7ba50f6575cb3f6912a2b298c50a77208fb92cfc80bb2611eb0d8d91d19a10fc
- MD5 43421e0147323b495e575977bbc38c1c
- SHA1 112fc376785056cc7d84c6eaf6214948ab2c2dca
- SHA512 80a39bd7faa0963fad53d5a84a5deb0b8b31a81c49099fc41ae43d30d7934c4acd7056449b0d0df7609aea574228e42d065b32e31b55f4a7ab126275ad29e44c
- SSDEEP 196608:TSffmWnXdQqPpLV7BPdSa7GN15qkZADm/N4zwl2+ClUNbRw:mWQdQ4LVGwDmF4zg2+UyRw
- TLSH T1C0A6D0BE8F7E53DAC1AAC5F0F57692C6B4107848A076A7C62BC0079D6727160ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.