General
- Target 2026-07-30_aed8d935758c741f5e637024074be65a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- Sample260730-nb99yszwd1
- SHA256 276d37422ef9ee889335bad2186db2ebc7df61f489560d72de0860bea73ef4b1
- MD5 aed8d935758c741f5e637024074be65a
- SHA1 f1de93ae69b260386c4f42cfeca396d66f9a01e2
- SHA512 74cf85ff6612b41ccbb7d11a9dc1eaf241c17da30ee5e436235a10b4e6c73fee1350fd3bd3f30dc030a0208377d83f5bdb1ecb76a0ca0a4dfab3f56b370de17b
- SSDEEP 196608:Jz7kDd8MnhegKP+aYqKN2tQZ6vGlyj6NUWTMNORVve2wJQgwoCCf99e:tkd8MnhuP+H7NJMBj6NUWTPNroCiG
- TLSH T188B63369E7D804F8D0B7D5B89A924916F733784A0370DB0F16A9A6D24F23190DD3EB36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_aed8d935758c741f5e637024074be65a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_aed8d935758c741f5e637024074be65a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_aed8d935758c741f5e637024074be65a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- SHA256 276d37422ef9ee889335bad2186db2ebc7df61f489560d72de0860bea73ef4b1
- MD5 aed8d935758c741f5e637024074be65a
- SHA1 f1de93ae69b260386c4f42cfeca396d66f9a01e2
- SHA512 74cf85ff6612b41ccbb7d11a9dc1eaf241c17da30ee5e436235a10b4e6c73fee1350fd3bd3f30dc030a0208377d83f5bdb1ecb76a0ca0a4dfab3f56b370de17b
- SSDEEP 196608:Jz7kDd8MnhegKP+aYqKN2tQZ6vGlyj6NUWTMNORVve2wJQgwoCCf99e:tkd8MnhuP+H7NJMBj6NUWTPNroCiG
- TLSH T188B63369E7D804F8D0B7D5B89A924916F733784A0370DB0F16A9A6D24F23190DD3EB36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE