General
- Target 2026-08-02_e74692578127715c5e1fa0f4978dcc8c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 268KB
- Sample260802-mk49ma1bja
- SHA256 f0e70c9e9169e8df4be60e24a2dad319b58d7d97a01868f9c5da7b3bd230583c
- MD5 e74692578127715c5e1fa0f4978dcc8c
- SHA1 08c579a2b5c3162c98aecbc4965c63d89e83ae57
- SHA512 3a67763843cab85ff949632e73739ad037cba2485c9ef0bfee0d77cf1fc0859f2eb2c0e0338c791dfc86c35b1278159fa6e9f53ea186864a33bac46f08403481
- SSDEEP 6144:zbcvLL+JL3n6Gsri+NIOuXtaIe20ezxy/:zbrrnJsriJO0aIm
- TLSH T16B447D15B7A50CF9ED67867DCC425906EA72BC174760E78F03A04A971F236E09E3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_e74692578127715c5e1fa0f4978dcc8c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_e74692578127715c5e1fa0f4978dcc8c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_e74692578127715c5e1fa0f4978dcc8c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 268KB
- SHA256 f0e70c9e9169e8df4be60e24a2dad319b58d7d97a01868f9c5da7b3bd230583c
- MD5 e74692578127715c5e1fa0f4978dcc8c
- SHA1 08c579a2b5c3162c98aecbc4965c63d89e83ae57
- SHA512 3a67763843cab85ff949632e73739ad037cba2485c9ef0bfee0d77cf1fc0859f2eb2c0e0338c791dfc86c35b1278159fa6e9f53ea186864a33bac46f08403481
- SSDEEP 6144:zbcvLL+JL3n6Gsri+NIOuXtaIe20ezxy/:zbrrnJsriJO0aIm
- TLSH T16B447D15B7A50CF9ED67867DCC425906EA72BC174760E78F03A04A971F236E09E3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (446) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.