General
- Target 2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
- Size 27.5MB
- Sample260809-ckqfcsycke
- SHA256 ca647f31fbe381aacb9fc16f257dc0b8f1db6ee506179fdbd495952ef0c1e8ca
- MD5 7ae7165b33b9303fecb34f9767e9c64c
- SHA1 f22f55c7e5ee61e885eaabda21c016c835937915
- SHA512 31c990d312a06473bf73d59e210a7cc00bb1ccc20bed0dc3207666ee56ef87ffa197973cb0b6e552c6169f80fc1f7edc22d6a4cd34ac39c6368e34075ad12409
- SSDEEP 393216:jplJO/BRP3izpseVugy6OJpS7RcoqKZojixo5WrZlINl2N/QgOcpSOQSg184lzOk:tlJOb6NTVFy6aStctit0lUfxSxSWb
- TLSH T1525733CEA16140EFE5B651BCDA280650E66EECAA4B40C47F27C179BC9E770C1CF59B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
- Size 27.5MB
- SHA256 ca647f31fbe381aacb9fc16f257dc0b8f1db6ee506179fdbd495952ef0c1e8ca
- MD5 7ae7165b33b9303fecb34f9767e9c64c
- SHA1 f22f55c7e5ee61e885eaabda21c016c835937915
- SHA512 31c990d312a06473bf73d59e210a7cc00bb1ccc20bed0dc3207666ee56ef87ffa197973cb0b6e552c6169f80fc1f7edc22d6a4cd34ac39c6368e34075ad12409
- SSDEEP 393216:jplJO/BRP3izpseVugy6OJpS7RcoqKZojixo5WrZlINl2N/QgOcpSOQSg184lzOk:tlJOb6NTVFy6aStctit0lUfxSxSWb
- TLSH T1525733CEA16140EFE5B651BCDA280650E66EECAA4B40C47F27C179BC9E770C1CF59B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL