General
- Target 2026-08-18_608792dc53745e36bd0be675b816cde8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.7MB
- Sample260818-nr5peagh59
- SHA256 0bd5c27c8ca39bc46bd0a0b19f0d3daca084dd2cc8bc7981960403acdf5d38e9
- MD5 608792dc53745e36bd0be675b816cde8
- SHA1 3ec08a19fd11d3002a6dd54d42095e5a8a8c852c
- SHA512 c928fbd7bc7d2c650b6e79a07f0f442f756e908e34c6ca62b8c3fb8cc56a319a3d9d14804905ad4b2156a54499e6acafbbd251bf46096c6a0561eb77b176d76a
- SSDEEP 98304:N22EME2sxGZumLkhphY08bRGq/Ycvfirsf4f4CxX:MrME2yIuUwphkP/FvfqRflB
- TLSH T12B06121667A842ACE0F7E3388A675912F77A780F03B19ADF039046671F676D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_608792dc53745e36bd0be675b816cde8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_608792dc53745e36bd0be675b816cde8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_608792dc53745e36bd0be675b816cde8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.7MB
- SHA256 0bd5c27c8ca39bc46bd0a0b19f0d3daca084dd2cc8bc7981960403acdf5d38e9
- MD5 608792dc53745e36bd0be675b816cde8
- SHA1 3ec08a19fd11d3002a6dd54d42095e5a8a8c852c
- SHA512 c928fbd7bc7d2c650b6e79a07f0f442f756e908e34c6ca62b8c3fb8cc56a319a3d9d14804905ad4b2156a54499e6acafbbd251bf46096c6a0561eb77b176d76a
- SSDEEP 98304:N22EME2sxGZumLkhphY08bRGq/Ycvfirsf4f4CxX:MrME2yIuUwphkP/FvfqRflB
- TLSH T12B06121667A842ACE0F7E3388A675912F77A780F03B19ADF039046671F676D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.