General
- Target 2026-07-30_292374baba50c08730c6a84bb888a833_cobalt-strike_coinminer_dosia_icedid_luca-stealer_njrat_quasar-rat_satacom_vidar
- Size 69.1MB
- Sample260730-x93gfawdpc
- SHA256 a14c6050a104f3ed0355e3dc4aed70e0898935816215de67cc7167922a7459c6
- MD5 292374baba50c08730c6a84bb888a833
- SHA1 027f5f673b711d82628a5bcf3156e68e4d227ee7
- SHA512 0d87a6d433442194ff9fa42c90a03d52b611eefaf825ec1b77624a38fac5075b4f079de11b3df0f0dfa9f55a1a24d9cdaf278fd0883579a5fdc24e36fed13277
- SSDEEP 1572864:YqTTi5iXq0nAoVBXQ/PgSEU6IWKAuZ508zynCyP:NTK7o3gXgSEU6AAuVMCQ
- TLSH T1F7F7334192824CB4CA7B95F60DA379D7BDF17DF54BA5840E42C1FC903B02BEA3A99709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_292374baba50c08730c6a84bb888a833_cobalt-strike_coinminer_dosia_icedid_luca-stealer_njrat_quasar-rat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_292374baba50c08730c6a84bb888a833_cobalt-strike_coinminer_dosia_icedid_luca-stealer_njrat_quasar-rat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_292374baba50c08730c6a84bb888a833_cobalt-strike_coinminer_dosia_icedid_luca-stealer_njrat_quasar-rat_satacom_vidar
- Size 69.1MB
- SHA256 a14c6050a104f3ed0355e3dc4aed70e0898935816215de67cc7167922a7459c6
- MD5 292374baba50c08730c6a84bb888a833
- SHA1 027f5f673b711d82628a5bcf3156e68e4d227ee7
- SHA512 0d87a6d433442194ff9fa42c90a03d52b611eefaf825ec1b77624a38fac5075b4f079de11b3df0f0dfa9f55a1a24d9cdaf278fd0883579a5fdc24e36fed13277
- SSDEEP 1572864:YqTTi5iXq0nAoVBXQ/PgSEU6IWKAuZ508zynCyP:NTK7o3gXgSEU6AAuVMCQ
- TLSH T1F7F7334192824CB4CA7B95F60DA379D7BDF17DF54BA5840E42C1FC903B02BEA3A99709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL