General
- Target 2026-08-02_7fc44f191f33e50733b0ad9f9683ed1f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 270KB
- Sample260802-nfjykahn8t
- SHA256 d81c5951c63e0f9debaf933c72a8abdfb8ce38da7163ac1c040e5db73607114d
- MD5 7fc44f191f33e50733b0ad9f9683ed1f
- SHA1 8897d71977a793e2efd360ae1b807394d615dbd9
- SHA512 e41b3cb2fe136ad60283387f1a952fe2381f78bd046981a913b8dd3824cba00deacfbea927a944353b8b092751be74f0e5235c5d0282ee33b88a5f2d62d1ef8b
- SSDEEP 6144:A1+56X4g/r5UIjh3ibfdKc5glNZxbPUkpjUmuzJwKS/iTNG/1snEfmQ2qzvFNIeU:X6Igz5pjh3iRK6gl
- TLSH T1DB447C15B7A50CF9ED67867DCC425906EB72BC564760EACF03A00A971F236E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_7fc44f191f33e50733b0ad9f9683ed1f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_7fc44f191f33e50733b0ad9f9683ed1f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_7fc44f191f33e50733b0ad9f9683ed1f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 270KB
- SHA256 d81c5951c63e0f9debaf933c72a8abdfb8ce38da7163ac1c040e5db73607114d
- MD5 7fc44f191f33e50733b0ad9f9683ed1f
- SHA1 8897d71977a793e2efd360ae1b807394d615dbd9
- SHA512 e41b3cb2fe136ad60283387f1a952fe2381f78bd046981a913b8dd3824cba00deacfbea927a944353b8b092751be74f0e5235c5d0282ee33b88a5f2d62d1ef8b
- SSDEEP 6144:A1+56X4g/r5UIjh3ibfdKc5glNZxbPUkpjUmuzJwKS/iTNG/1snEfmQ2qzvFNIeU:X6Igz5pjh3iRK6gl
- TLSH T1DB447C15B7A50CF9ED67867DCC425906EB72BC564760EACF03A00A971F236E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (158) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.