General
- Target 2026-08-15_8511952cc59bb4ae0e42fff37828b223_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 452KB
- Sample260815-jbfywsgn4s
- SHA256 b5aa19e8c5772cd369573a57a241d3e4b9fe4e7f81e9e754347d303e09a20301
- MD5 8511952cc59bb4ae0e42fff37828b223
- SHA1 f4933487cd7ae80f008597fe17f936227552e180
- SHA512 e8b9cdaf281f43e8b6e2525ea9d2e42f105d408190ec3564a15dfe8314d3487ea4c6e5fbc645b1e3e9c0431f5e83ae1dd16f69051499d2e7d79e3c0372540ca8
- SSDEEP 6144:yz1eXfQ+IqV6EL8aVh3ZqK8DN/ya7cLyMO84+c4Edd47BXAFk/yDwZpLptmZM9Aw:RngM8K8P4ElXddah8kyDIZ9Wcz
- TLSH T1AEA47D09E7E804F8E0B7E1B8D9564902E77A7C4E1771D78F13A456562F233A09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_8511952cc59bb4ae0e42fff37828b223_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_8511952cc59bb4ae0e42fff37828b223_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_8511952cc59bb4ae0e42fff37828b223_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 452KB
- SHA256 b5aa19e8c5772cd369573a57a241d3e4b9fe4e7f81e9e754347d303e09a20301
- MD5 8511952cc59bb4ae0e42fff37828b223
- SHA1 f4933487cd7ae80f008597fe17f936227552e180
- SHA512 e8b9cdaf281f43e8b6e2525ea9d2e42f105d408190ec3564a15dfe8314d3487ea4c6e5fbc645b1e3e9c0431f5e83ae1dd16f69051499d2e7d79e3c0372540ca8
- SSDEEP 6144:yz1eXfQ+IqV6EL8aVh3ZqK8DN/ya7cLyMO84+c4Edd47BXAFk/yDwZpLptmZM9Aw:RngM8K8P4ElXddah8kyDIZ9Wcz
- TLSH T1AEA47D09E7E804F8E0B7E1B8D9564902E77A7C4E1771D78F13A456562F233A09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application