Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 23:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_beae8b968822e91dd18a78f88ddfe66d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_beae8b968822e91dd18a78f88ddfe66d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-05_beae8b968822e91dd18a78f88ddfe66d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 1.0MB
- Sample260805-3xhjdsaj21
- SHA256 c0268be060a48b26ed02bf098cf501aacbe5e319a52b9fcd96299f86dc446c42
- MD5 beae8b968822e91dd18a78f88ddfe66d
- SHA1 ca0cf2729834c7eb1644b0c164ac4f43bd6edd17
- SHA512 3b94b2ca240d370b947c4223e6a0598f66523aef8568efd7d9971f2ac8ba7fdf81bd1d837b8ff29ee5ee8a3683ebf33437a3d6dbdcd44ddb5ec8ede086ecef84
- SSDEEP 12288:P/0sl/1wA2TOQoHsq2AfZ+GGX8FYLLhA+9Rd6pdgk7NkUCMVnU6NoHHpnyo21P74:PP1w7CzZ5GLFAELC6jMZzUJnyPP2E
- TLSH T18335C005B29545FEC4579439D963B31BEBB63C5A0B20C6DB13E08A6A3FE72D05E7A301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4476 2026-08-05_beae8b968822e91dd18a78f88ddfe66d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeIncBasePriorityPrivilege 4476 2026-08-05_beae8b968822e91dd18a78f88ddfe66d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-05_beae8b968822e91dd18a78f88ddfe66d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-05_beae8b968822e91dd18a78f88ddfe66d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:4476