Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 10:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 138KB
- Sample260815-mx9d4sam6w
- SHA256 930197d529f16f65412507956763409dd361ea920c7f4cd5fa6bd6119df9bc00
- MD5 981e99bdf3ae2fd1697d9c9d3c6afab7
- SHA1 a549e6f5d273a7e627b14a07de87fe43750b9e37
- SHA512 46996db7c22f23c562149f433c8864bdc3ee2c67e123e1754e9dd189cb5d6e58729deebd76a66826e0ac69a0cc739aa37c3b2deefcd5b72709d9270ac18d95a0
- SSDEEP 3072:LocZcD4mtaXM4TxykVt69Nsdn8yxmHLP19d0:XZToaXRX69qdlwXd
- TLSH T15AD36B2B73E534F9D0B7923989614A42F7B2787207609BDF03A447662F232D19D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe 2196 2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-15_981e99bdf3ae2fd1697d9c9d3c6afab7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2196