General
- Target 2026-07-27_a574fcd8f5d3f6cd549476496142960f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 160KB
- Sample260727-1lnvxssalf
- SHA256 d2e8255fe40ff37ed6614ce583d3f8219531c94febaca647909fa3bff756dfc2
- MD5 a574fcd8f5d3f6cd549476496142960f
- SHA1 5b420598257ca84f6c5cf4d9c0e499d387172deb
- SHA512 bf86b837ec4f6986c8654630929eb4e8ee75bbd25f0ee059f1b9950a4c71f4ac8d7c507b5955702c30f88630483b2dd329384973004eab9462ca91b669cbe97b
- SSDEEP 3072:gDR8ulJgZ8KTjtucULmUcFpCehdHV/K5fCIpS:+R8q28KTjtvUIcehdH1uS
- TLSH T16EF36C0BB7A425F9E1778278C8A10A42F772B87507609BDF03A047765F672E09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_a574fcd8f5d3f6cd549476496142960f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_a574fcd8f5d3f6cd549476496142960f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_a574fcd8f5d3f6cd549476496142960f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 160KB
- SHA256 d2e8255fe40ff37ed6614ce583d3f8219531c94febaca647909fa3bff756dfc2
- MD5 a574fcd8f5d3f6cd549476496142960f
- SHA1 5b420598257ca84f6c5cf4d9c0e499d387172deb
- SHA512 bf86b837ec4f6986c8654630929eb4e8ee75bbd25f0ee059f1b9950a4c71f4ac8d7c507b5955702c30f88630483b2dd329384973004eab9462ca91b669cbe97b
- SSDEEP 3072:gDR8ulJgZ8KTjtucULmUcFpCehdHV/K5fCIpS:+R8q28KTjtvUIcehdH1uS
- TLSH T16EF36C0BB7A425F9E1778278C8A10A42F772B87507609BDF03A047765F672E09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.