General
- Target 2026-08-09_840316eeedfb4d0f7a15681c761134ce_cloudeye_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 89.2MB
- Sample260809-cj94daybre
- SHA256 1d53e398b794239cfac9cdf291553d566c802f8166b6e809e4fe70fc14fe76eb
- MD5 840316eeedfb4d0f7a15681c761134ce
- SHA1 de4419c083c4100db9df3c650643699327070dad
- SHA512 f8dd968fffb9ac008457014de6bb5e427dc36171a53cfefbf4e6fcfea705dd12f586f4c410c522796b70407f3f057eeeeab92273cc147e2cc30787a49d9fb5a4
- SSDEEP 1572864:6He4hdV6xffH3ynQ3Y9GF0J2/3M4fvHLTkEY68xsqBJhmH11SZ5KhaoA:6He4DoxfPiI/0A/3/vHLosEeH+Aa5
- TLSH T1AD283327EAA908FDD0E1B67DD17F0595C363384F176640CB32AE42AF7EB65018E36642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_840316eeedfb4d0f7a15681c761134ce_cloudeye_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_840316eeedfb4d0f7a15681c761134ce_cloudeye_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_840316eeedfb4d0f7a15681c761134ce_cloudeye_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 89.2MB
- SHA256 1d53e398b794239cfac9cdf291553d566c802f8166b6e809e4fe70fc14fe76eb
- MD5 840316eeedfb4d0f7a15681c761134ce
- SHA1 de4419c083c4100db9df3c650643699327070dad
- SHA512 f8dd968fffb9ac008457014de6bb5e427dc36171a53cfefbf4e6fcfea705dd12f586f4c410c522796b70407f3f057eeeeab92273cc147e2cc30787a49d9fb5a4
- SSDEEP 1572864:6He4hdV6xffH3ynQ3Y9GF0J2/3M4fvHLTkEY68xsqBJhmH11SZ5KhaoA:6He4DoxfPiI/0A/3/vHLosEeH+Aa5
- TLSH T1AD283327EAA908FDD0E1B67DD17F0595C363384F176640CB32AE42AF7EB65018E36642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Outbound SSH connection to public host
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.