Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
20/08/2026, 00:08
General
- Target 2026-08-19_8a733ea05ddd13eb371e8c43847a29ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 4.0MB
- Sample260820-ae896swerg
- SHA256 dee8537c7c9eb811c12e6c666d5427b7a47ac535662e41e84e41c66ab05be891
Malware Config
Signatures
- Family: Shellter Trojan
Shellter is a dynamic shellcode injector used to hide malicious payloads within existing PE files for evasion.
- Detects Shellter Trojan 2 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-19_8a733ea05ddd13eb371e8c43847a29ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-19_8a733ea05ddd13eb371e8c43847a29ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2844-0-0x00000241675B0000-0x0000024167638000-memory.dmp
memory/2844-1-0x00000241675B0000-0x0000024167638000-memory.dmp
memory/2844-2-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-5-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-7-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-8-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-10-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-12-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-16-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-24-0x00007FF4384F0000-0x00007FF4384F1000-memory.dmp
memory/2844-146-0x00007FFEEA76D000-0x00007FFEEA76E000-memory.dmp
memory/2844-334-0x00007FFEEA6D0000-0x00007FFEEA8C5000-memory.dmp
memory/2844-353-0x00007FF4386D0000-0x00007FF4386D7000-memory.dmp
memory/2844-359-0x0000024167710000-0x0000024167711000-memory.dmp
memory/2844-358-0x0000024167710000-0x0000024167711000-memory.dmp
memory/2844-364-0x0000024167740000-0x0000024167741000-memory.dmp
memory/2844-400-0x0000024167870000-0x0000024167871000-memory.dmp
memory/2844-412-0x00000241678D0000-0x00000241678D2000-memory.dmp
memory/2844-411-0x00000241678C0000-0x00000241678C1000-memory.dmp
memory/2844-410-0x00000241678C0000-0x00000241678C1000-memory.dmp
memory/2844-409-0x00000241678B0000-0x00000241678B1000-memory.dmp
memory/2844-408-0x00000241678B0000-0x00000241678B1000-memory.dmp
memory/2844-407-0x00000241678A0000-0x00000241678A1000-memory.dmp
memory/2844-406-0x00000241678A0000-0x00000241678A1000-memory.dmp
memory/2844-405-0x0000024167890000-0x0000024167891000-memory.dmp
memory/2844-404-0x0000024167890000-0x0000024167891000-memory.dmp
memory/2844-403-0x0000024167880000-0x0000024167881000-memory.dmp
memory/2844-402-0x0000024167880000-0x0000024167881000-memory.dmp
memory/2844-401-0x0000024167870000-0x0000024167871000-memory.dmp
memory/2844-399-0x0000024167860000-0x0000024167861000-memory.dmp
memory/2844-398-0x0000024167860000-0x0000024167861000-memory.dmp
memory/2844-397-0x0000024167850000-0x0000024167851000-memory.dmp
memory/2844-396-0x0000024167850000-0x0000024167851000-memory.dmp
memory/2844-395-0x0000024167840000-0x0000024167841000-memory.dmp
memory/2844-394-0x0000024167840000-0x0000024167841000-memory.dmp
memory/2844-393-0x0000024167830000-0x0000024167831000-memory.dmp
memory/2844-392-0x0000024167830000-0x0000024167831000-memory.dmp
memory/2844-391-0x0000024167820000-0x0000024167821000-memory.dmp
memory/2844-390-0x0000024167820000-0x0000024167821000-memory.dmp
memory/2844-389-0x0000024167810000-0x0000024167811000-memory.dmp
memory/2844-388-0x0000024167810000-0x0000024167811000-memory.dmp
memory/2844-387-0x0000024167800000-0x0000024167801000-memory.dmp
memory/2844-386-0x0000024167800000-0x0000024167801000-memory.dmp
memory/2844-385-0x00000241677F0000-0x00000241677F1000-memory.dmp
memory/2844-384-0x00000241677F0000-0x00000241677F1000-memory.dmp
memory/2844-383-0x00000241677E0000-0x00000241677E1000-memory.dmp
memory/2844-382-0x00000241677E0000-0x00000241677E1000-memory.dmp
memory/2844-381-0x00000241677D0000-0x00000241677D1000-memory.dmp
memory/2844-380-0x00000241677D0000-0x00000241677D1000-memory.dmp
memory/2844-379-0x00000241677C0000-0x00000241677C1000-memory.dmp
memory/2844-378-0x00000241677C0000-0x00000241677C1000-memory.dmp
memory/2844-377-0x00000241677B0000-0x00000241677B1000-memory.dmp
memory/2844-376-0x00000241677B0000-0x00000241677B1000-memory.dmp
memory/2844-375-0x00000241677A0000-0x00000241677A1000-memory.dmp
memory/2844-374-0x00000241677A0000-0x00000241677A1000-memory.dmp
memory/2844-373-0x0000024167790000-0x0000024167791000-memory.dmp
memory/2844-372-0x0000024167790000-0x0000024167791000-memory.dmp
memory/2844-371-0x0000024167780000-0x0000024167781000-memory.dmp
memory/2844-370-0x0000024167780000-0x0000024167781000-memory.dmp
memory/2844-369-0x0000024167770000-0x0000024167771000-memory.dmp
memory/2844-368-0x0000024167770000-0x0000024167771000-memory.dmp
memory/2844-367-0x0000024167760000-0x0000024167761000-memory.dmp
memory/2844-366-0x0000024167760000-0x0000024167761000-memory.dmp
memory/2844-365-0x0000024167740000-0x0000024167741000-memory.dmp
memory/2844-363-0x0000024167730000-0x0000024167731000-memory.dmp
memory/2844-362-0x0000024167730000-0x0000024167731000-memory.dmp
memory/2844-361-0x0000024167720000-0x0000024167721000-memory.dmp
memory/2844-360-0x0000024167720000-0x0000024167721000-memory.dmp
memory/2844-480-0x00007FFEEA6D0000-0x00007FFEEA8C5000-memory.dmp
memory/2844-851-0x00007FFEEA6D0000-0x00007FFEEA8C5000-memory.dmp
memory/2844-3064-0x00000241675B0000-0x0000024167638000-memory.dmp