General

  • Target
    2026-08-09_840316eeedfb4d0f7a15681c761134ce_cloudeye_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
  • Size 89.2MB
  • Sample260809-cj94daybre
  • SHA256 1d53e398b794239cfac9cdf291553d566c802f8166b6e809e4fe70fc14fe76eb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-09_840316eeedfb4d0f7a15681c761134ce_cloudeye_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
    • Size 89.2MB
    • SHA256 1d53e398b794239cfac9cdf291553d566c802f8166b6e809e4fe70fc14fe76eb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Outbound SSH connection to public host

      SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

MITRE ATT&CK Enterprise v16

Tasks