General
- Target 2026-08-15_3abab73c18f7b2cd0808d776966dfb9d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.3MB
- Sample260816-a2c59awgpd
- SHA256 95f3cd5cb5345a641152ebe520d0508dc01a8dc9e29e32c4d832a3709ef12b7c
- MD5 3abab73c18f7b2cd0808d776966dfb9d
- SHA1 13e16e5e2fc296d4bc5fec2a70aea1f49ea46f26
- SHA512 c8c2a3067504608762e3dfa9dc3f33a4d02d4ae2799298c248a8c22eaae3a30ea8fa27ed76a75fc814cd37cd784bac2d5f1a7db7ea0da0dc5bdb14ef3647ba4a
- SSDEEP 24576:1ZuW6XX6UhSDbOK6160Rru0psqjnhMgeiCl7G0nehbGZpbD:1ZuW6XqUhgbQ6urvDmg27RnWGj
- TLSH T12155D055569C03E5D4BA8439C5428779F0B2BC254BA18ACB82B47B6F1F7B5E04F3EB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_3abab73c18f7b2cd0808d776966dfb9d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_3abab73c18f7b2cd0808d776966dfb9d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_3abab73c18f7b2cd0808d776966dfb9d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.3MB
- SHA256 95f3cd5cb5345a641152ebe520d0508dc01a8dc9e29e32c4d832a3709ef12b7c
- MD5 3abab73c18f7b2cd0808d776966dfb9d
- SHA1 13e16e5e2fc296d4bc5fec2a70aea1f49ea46f26
- SHA512 c8c2a3067504608762e3dfa9dc3f33a4d02d4ae2799298c248a8c22eaae3a30ea8fa27ed76a75fc814cd37cd784bac2d5f1a7db7ea0da0dc5bdb14ef3647ba4a
- SSDEEP 24576:1ZuW6XX6UhSDbOK6160Rru0psqjnhMgeiCl7G0nehbGZpbD:1ZuW6XqUhgbQ6urvDmg27RnWGj
- TLSH T12155D055569C03E5D4BA8439C5428779F0B2BC254BA18ACB82B47B6F1F7B5E04F3EB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1