General
- Target 2026-08-05_0e5111b19580e1c9a7edf391f0b105be_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.2MB
- Sample260805-1l4ldaxcjc
- SHA256 ea081d2e9937a645e36661f1178dfc86eed483b57d7245d513655e250da9b0f1
- MD5 0e5111b19580e1c9a7edf391f0b105be
- SHA1 ffbd6b07080847f89a9951d09f9cffa900acd552
- SHA512 4e3fe882d64c79ae4e9648ad3f199d298d2e00ecdf397f80cd55e911f1bd591b0a2a018377bd01afb597b25081593eaff8b27fb21e36747ca7d5d4a9fb62405b
- SSDEEP 24576:DtZSmlH5XnhZ4bCW12IsFRGdmecyXeq0/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:DtZSmlH53habj12IsFRG5/sLNiXicJFc
- TLSH T1F5557C83EBB621E4E4F6D13681622327BC723C19833487D7A3895B1A5B767E0D97E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_0e5111b19580e1c9a7edf391f0b105be_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_0e5111b19580e1c9a7edf391f0b105be_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_0e5111b19580e1c9a7edf391f0b105be_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.2MB
- SHA256 ea081d2e9937a645e36661f1178dfc86eed483b57d7245d513655e250da9b0f1
- MD5 0e5111b19580e1c9a7edf391f0b105be
- SHA1 ffbd6b07080847f89a9951d09f9cffa900acd552
- SHA512 4e3fe882d64c79ae4e9648ad3f199d298d2e00ecdf397f80cd55e911f1bd591b0a2a018377bd01afb597b25081593eaff8b27fb21e36747ca7d5d4a9fb62405b
- SSDEEP 24576:DtZSmlH5XnhZ4bCW12IsFRGdmecyXeq0/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:DtZSmlH53habj12IsFRG5/sLNiXicJFc
- TLSH T1F5557C83EBB621E4E4F6D13681622327BC723C19833487D7A3895B1A5B767E0D97E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1