General
- Target 2026-08-02_3a5aaf369f5c879cc523caea3b464f50_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 268KB
- Sample260802-dvdpzscm4y
- SHA256 c46241b86d671aae7accce7e7b50cfe032d5561e43a48bf24708fba656ce7959
- MD5 3a5aaf369f5c879cc523caea3b464f50
- SHA1 8969ff0e07914fbb23948686646eb7dcb59e38d6
- SHA512 04cdf42ef0251c1c0758001480a14377ee7ced6ac34287af83ce3a9a56707cf4259612d7da868c99a0f8bb7735f1ed236bd3ad9134e3c6fc110e10c728c3924e
- SSDEEP 3072:8cBqQCqBnsBAkRB0H/10OR+TlVU6NGX7yRwTqu97jSf0fm3cNwaOHf8SdCEuyL3:87QnsVB0/DR+TzTNG3D9NeuOgEuyL3
- TLSH T162447D15B7A40CF9ED67867DCC525906EB72BC464760E6CF03A00A971F236E09E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_3a5aaf369f5c879cc523caea3b464f50_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_3a5aaf369f5c879cc523caea3b464f50_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_3a5aaf369f5c879cc523caea3b464f50_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 268KB
- SHA256 c46241b86d671aae7accce7e7b50cfe032d5561e43a48bf24708fba656ce7959
- MD5 3a5aaf369f5c879cc523caea3b464f50
- SHA1 8969ff0e07914fbb23948686646eb7dcb59e38d6
- SHA512 04cdf42ef0251c1c0758001480a14377ee7ced6ac34287af83ce3a9a56707cf4259612d7da868c99a0f8bb7735f1ed236bd3ad9134e3c6fc110e10c728c3924e
- SSDEEP 3072:8cBqQCqBnsBAkRB0H/10OR+TlVU6NGX7yRwTqu97jSf0fm3cNwaOHf8SdCEuyL3:87QnsVB0/DR+TzTNG3D9NeuOgEuyL3
- TLSH T162447D15B7A40CF9ED67867DCC525906EB72BC464760E6CF03A00A971F236E09E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (453) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.