Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/08/2026, 00:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 1.6MB
- Sample260819-abr7gsshrd
- SHA256 7b7ca206bd7190424efca1ec0d7325708d97a31134f0842ad3bb2e2650b51bc3
- MD5 24b066d70b39c8a5cc5560f5f8516717
- SHA1 ef3f437ba771e606cf5f662645f588d5679bd902
- SHA512 83ba21ae6bcb0827b4398e380b022ea1f3af8fcd90aadb438353c5aa9bd1064196ea6862d22f514a70c8ca53ebb3db8d533942fc1b314dda399f7a588bf91412
- SSDEEP 24576:i5uG0S2BfLsqjnhMgeiCl7G0nehbGZpbD:i5J0BB3Dmg27RnWGj
- TLSH T18985BE45A3E805E9E4B7D279CDB78506EA367C594B30CACF1360C56A6F33AD08E35722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks SCSI registry key(s) 3 TTPs 6 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags 2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID 2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags 2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID 2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-18_24b066d70b39c8a5cc5560f5f8516717_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Checks SCSI registry key(s)
PID:2796