General
- Target 2026-08-02_f29c1c563ee9d60415ac81c4876099d0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 268KB
- Sample260802-mgpd1a1ajb
- SHA256 63542b002db5d17e15ad7bcf1a1e4258bfd0203024ef2b030410c1bcfc84153f
- MD5 f29c1c563ee9d60415ac81c4876099d0
- SHA1 66b86711713bfbdd1a8aabb0cdae6d41d6ee207d
- SHA512 a77dd37a90c42ee27932a4331163d642d43c666cff6c7be8f76f6c136e5bcea89a810d9b327a0abf8b649ebaec1521dddfcf5ef3608f923cbcd7168c60a68413
- SSDEEP 3072:+dwd0j3qZSoHWmRqPUwCsH0kJ7FU88UdyCIlbA6/5hoSf0fm3cfwwOrTH3dCMl+p:Pd0j/OxY7CsH0kJht8UlW5ueqOsMl+
- TLSH T1E5448D16B7A40CF9ED67867DCC425905EB72BC564760EACF03A00A971F236E09E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f29c1c563ee9d60415ac81c4876099d0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f29c1c563ee9d60415ac81c4876099d0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f29c1c563ee9d60415ac81c4876099d0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 268KB
- SHA256 63542b002db5d17e15ad7bcf1a1e4258bfd0203024ef2b030410c1bcfc84153f
- MD5 f29c1c563ee9d60415ac81c4876099d0
- SHA1 66b86711713bfbdd1a8aabb0cdae6d41d6ee207d
- SHA512 a77dd37a90c42ee27932a4331163d642d43c666cff6c7be8f76f6c136e5bcea89a810d9b327a0abf8b649ebaec1521dddfcf5ef3608f923cbcd7168c60a68413
- SSDEEP 3072:+dwd0j3qZSoHWmRqPUwCsH0kJ7FU88UdyCIlbA6/5hoSf0fm3cfwwOrTH3dCMl+p:Pd0j/OxY7CsH0kJht8UlW5ueqOsMl+
- TLSH T1E5448D16B7A40CF9ED67867DCC425905EB72BC564760EACF03A00A971F236E09E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (452) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.