General
- Target 2026-08-09_d3732d5e0ec07f4e37e41d16b15f3c9a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 899KB
- Sample260809-lswf1sverg
- SHA256 510e339afedb8997671760c877783f3644bec2069e9d9aa8614f09f77e8e0600
- MD5 d3732d5e0ec07f4e37e41d16b15f3c9a
- SHA1 7171f545c73b92bdc95b471480f704b10533d6d6
- SHA512 27311251639633b54edbb4120df1bb5a226471253f4f631219ffcb2bf1c8a675f97cdf1f61077221e9400776084976cbcf1991181e6f1be10f9124c8f9468c02
- SSDEEP 12288:HrkBVin4+1tAVT6UrqeYsjrPZQuZUzhjmjuEhcQCiVPx+/pM:LtA9brqeYsZQhzhjmjuEhcQCiVQpM
- TLSH T11E158D1AF7A504BDE1A7D27CC9634902E7727C4A0760DBDF13904A661F2BBD0AA3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d3732d5e0ec07f4e37e41d16b15f3c9a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d3732d5e0ec07f4e37e41d16b15f3c9a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d3732d5e0ec07f4e37e41d16b15f3c9a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 899KB
- SHA256 510e339afedb8997671760c877783f3644bec2069e9d9aa8614f09f77e8e0600
- MD5 d3732d5e0ec07f4e37e41d16b15f3c9a
- SHA1 7171f545c73b92bdc95b471480f704b10533d6d6
- SHA512 27311251639633b54edbb4120df1bb5a226471253f4f631219ffcb2bf1c8a675f97cdf1f61077221e9400776084976cbcf1991181e6f1be10f9124c8f9468c02
- SSDEEP 12288:HrkBVin4+1tAVT6UrqeYsjrPZQuZUzhjmjuEhcQCiVPx+/pM:LtA9brqeYsZQhzhjmjuEhcQCiVQpM
- TLSH T11E158D1AF7A504BDE1A7D27CC9634902E7727C4A0760DBDF13904A661F2BBD0AA3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.