General
- Target 2026-08-14_8663e8ef55e0c98daf4ef2de105e41b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 138KB
- Sample260814-eg386athmb
- SHA256 d10d290f6612864e176eaf15ea6ed751135342158cd477d22c93b6290eb76c58
- MD5 8663e8ef55e0c98daf4ef2de105e41b9
- SHA1 03134aa423364fe1fedd81307578a9381875dc5a
- SHA512 13634859e2fc69c932d2931d5a3f7be5ba32a3e2750eb21a3fa130aa6f65d00dee926ca5465324d3e34ed3528f1970952173140198b6bf0f58b9f2e732007683
- SSDEEP 3072:dVcWPvlriAsgoen9iTCbL+I0tT8cerA87gO:EWPvB1noki4h0t+E
- TLSH T111D37C6BB3A530F9E0779235C9A14946F7B2B83207219F5F03A447661F232D19E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-14_8663e8ef55e0c98daf4ef2de105e41b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-14_8663e8ef55e0c98daf4ef2de105e41b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Extracted
-
cobaltstrike
-
http://service-hzdzk12c-1318485841.gz.apigw.tencentcs.com:443/make/disclosure/8FSMVPUB2ZA
-
user_agent
Accept: text/html, image/*, application/xml Accept-Language: sk Accept-Encoding: identity, br User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
Targets
-
- Target 2026-08-14_8663e8ef55e0c98daf4ef2de105e41b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 138KB
- SHA256 d10d290f6612864e176eaf15ea6ed751135342158cd477d22c93b6290eb76c58
- MD5 8663e8ef55e0c98daf4ef2de105e41b9
- SHA1 03134aa423364fe1fedd81307578a9381875dc5a
- SHA512 13634859e2fc69c932d2931d5a3f7be5ba32a3e2750eb21a3fa130aa6f65d00dee926ca5465324d3e34ed3528f1970952173140198b6bf0f58b9f2e732007683
- SSDEEP 3072:dVcWPvlriAsgoen9iTCbL+I0tT8cerA87gO:EWPvB1noki4h0t+E
- TLSH T111D37C6BB3A530F9E0779235C9A14946F7B2B83207219F5F03A447661F232D19E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.