Analysis
- max time kernel
150s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 07:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 1.6MB
- Sample260808-jhpjlssfqa
- SHA256 904caf7b971580c611ac97fce0e2be3c47e41bd13fa754810d691e887b1e2056
- MD5 f0a8680fa5f280704afc15aaa047d1e7
- SHA1 7be390f2b8b536b71f6486c5b8a0fa276c892ebc
- SHA512 e69a4984041a80e5b39ea54a9e40adacb1eb3b98072e3bc648a8accac2895fe67cb7520b6a90d50af7c813f7e1338a96a2bcdda5d2a37dc24bfbac44cfaffa90
- SSDEEP 24576:5pRYy/96hMrXJyTArR4E4s9jGOIyxW3hbsiB5NN4qPJbkzrEQs:5t9j5R4E4sRS5RJwRs
- TLSH T16C85AF16A7A401EDD1B7D1B8CA574942E772780A0735AFEF07D0A6662F27BD04E3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1452 2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_f0a8680fa5f280704afc15aaa047d1e7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1452