General
- Target 2026-08-04_2f4761ac77234916ff54397ddce9bcf5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 316KB
- Sample260804-jp9s5aam4y
- SHA256 9506019430e4e0511a284b882f6fd828692ecbb84d6c219e8cf456a34c47ba63
- MD5 2f4761ac77234916ff54397ddce9bcf5
- SHA1 02d2aed6d5d8b1898c5e19de0ad0408f13e9f29b
- SHA512 265a74701d5f12b60f3ab0fabb698941fd93895f7f2dd033655b08899faf9e9ad5ed15bd1c35d66480397b9fbda53d5d7fbf0d38134ac226ddd983d306c52446
- SSDEEP 6144:NQ8OyYvc36AVuc7DQd/5zlgBR4JDQyeTbSfCrg:Nj16Qu15yBRCDDjCrg
- TLSH T195648C5AF3A814F9E977923CC8529507F772BC160760D78F27A0466A3F236A09D3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_2f4761ac77234916ff54397ddce9bcf5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_2f4761ac77234916ff54397ddce9bcf5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2f4761ac77234916ff54397ddce9bcf5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 316KB
- SHA256 9506019430e4e0511a284b882f6fd828692ecbb84d6c219e8cf456a34c47ba63
- MD5 2f4761ac77234916ff54397ddce9bcf5
- SHA1 02d2aed6d5d8b1898c5e19de0ad0408f13e9f29b
- SHA512 265a74701d5f12b60f3ab0fabb698941fd93895f7f2dd033655b08899faf9e9ad5ed15bd1c35d66480397b9fbda53d5d7fbf0d38134ac226ddd983d306c52446
- SSDEEP 6144:NQ8OyYvc36AVuc7DQd/5zlgBR4JDQyeTbSfCrg:Nj16Qu15yBRCDDjCrg
- TLSH T195648C5AF3A814F9E977923CC8529507F772BC160760D78F27A0466A3F236A09D3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application