General
- Target 2026-08-16_72580df82ab8ff5261703ba68f7273be_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 12.7MB
- Sample260816-reffjacn2x
- SHA256 cdea70ed9ea925c8b8b55bd1cd1f3535ad96706531d63a30215a493bb5fdc9c2
- MD5 72580df82ab8ff5261703ba68f7273be
- SHA1 3a38b3a3a2e5e15ae515cf51bc70671964515beb
- SHA512 e2c928679f71209aa1a98dc251ab566d1b56937a4369998bb7bab622ba88585e03e9f9f099baa7d3c3451522602aaeb0f32f6ee0a4d47634c17476aea334f95a
- SSDEEP 393216:4B3KqUl4Zhana7lmCB3KqUl4Zhana7lm:y3tUW4U3tUW4
- TLSH T17FD6124E9298FDA5E8724D78DB774FC9CB69EC01225DC64E02903E835B3F2427429F99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_72580df82ab8ff5261703ba68f7273be_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_72580df82ab8ff5261703ba68f7273be_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_72580df82ab8ff5261703ba68f7273be_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 12.7MB
- SHA256 cdea70ed9ea925c8b8b55bd1cd1f3535ad96706531d63a30215a493bb5fdc9c2
- MD5 72580df82ab8ff5261703ba68f7273be
- SHA1 3a38b3a3a2e5e15ae515cf51bc70671964515beb
- SHA512 e2c928679f71209aa1a98dc251ab566d1b56937a4369998bb7bab622ba88585e03e9f9f099baa7d3c3451522602aaeb0f32f6ee0a4d47634c17476aea334f95a
- SSDEEP 393216:4B3KqUl4Zhana7lmCB3KqUl4Zhana7lm:y3tUW4U3tUW4
- TLSH T17FD6124E9298FDA5E8724D78DB774FC9CB69EC01225DC64E02903E835B3F2427429F99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE