Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/07/2026, 17:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_6cef6631ba64ebdaecf49406ee6240d9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_6cef6631ba64ebdaecf49406ee6240d9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-30_6cef6631ba64ebdaecf49406ee6240d9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 706KB
- Sample260730-v4dvsatcpe
- SHA256 2fe33f73950b0622744e317c9f83e5bf749fbfbe1a9ea30c7aed05236997eb5d
- MD5 6cef6631ba64ebdaecf49406ee6240d9
- SHA1 9a4406186498393776dff345f65d96bda11b2af7
- SHA512 6b96e4ae6def2e07a4ba211a42efa181de5772fe55bb89c67b65076855ed6f6f3df0afec01aa7a22f057f0e9808946c1c71265f5ae22e3f1d34b9daa70f9e4a5
- SSDEEP 12288:z2hmtBo7qkztM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:/ed6mctvE/BT76+1NCE
- TLSH T100F41243B26631F9E1BB4270C5904205F77278B517A05F8F43A4463B6F33291AE2FBA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3184 2026-07-30_6cef6631ba64ebdaecf49406ee6240d9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_6cef6631ba64ebdaecf49406ee6240d9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_6cef6631ba64ebdaecf49406ee6240d9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3184