General
- Target 2026-08-04_9b84a5c18c0adb159a0e9f562e5bf1e1_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.4MB
- Sample260804-2hdffssare
- SHA256 a6ba8ac6245ebec97acebebbf4d9dc930bb58342dafee3c4a8a648470ca4b26b
- MD5 9b84a5c18c0adb159a0e9f562e5bf1e1
- SHA1 27b550173722fa9a610e5bde27b2da9e3a7a40dd
- SHA512 55882cc9bceca39421dc67bf10b448b67e2a19d3c4eb9cc23bcaee85e3d23d6ce68eed29c20f8ef92b9adde0d4403bde12b6baa3cdf4768a3165ddf236c706e0
- SSDEEP 98304:JzPX58ycgRQV+ydgGoXa/dbj+LR7oROCgXDVOUinnDT8cfrx2:JzPX9G7OqF+t7o4Cgohf8t
- TLSH T111262316E7E904F8D1A7B1B089924911F77BFC4D1B71974F07B8A6651F132A08E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_9b84a5c18c0adb159a0e9f562e5bf1e1_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_9b84a5c18c0adb159a0e9f562e5bf1e1_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_9b84a5c18c0adb159a0e9f562e5bf1e1_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.4MB
- SHA256 a6ba8ac6245ebec97acebebbf4d9dc930bb58342dafee3c4a8a648470ca4b26b
- MD5 9b84a5c18c0adb159a0e9f562e5bf1e1
- SHA1 27b550173722fa9a610e5bde27b2da9e3a7a40dd
- SHA512 55882cc9bceca39421dc67bf10b448b67e2a19d3c4eb9cc23bcaee85e3d23d6ce68eed29c20f8ef92b9adde0d4403bde12b6baa3cdf4768a3165ddf236c706e0
- SSDEEP 98304:JzPX58ycgRQV+ydgGoXa/dbj+LR7oROCgXDVOUinnDT8cfrx2:JzPX9G7OqF+t7o4Cgohf8t
- TLSH T111262316E7E904F8D1A7B1B089924911F77BFC4D1B71974F07B8A6651F132A08E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.