Analysis
- max time kernel
150s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/08/2026, 00:08
General
- Target 2026-08-19_8a733ea05ddd13eb371e8c43847a29ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 4.0MB
- Sample260820-ae896swerg
- SHA256 dee8537c7c9eb811c12e6c666d5427b7a47ac535662e41e84e41c66ab05be891
Malware Config
Signatures
- Family: Shellter Trojan
Shellter is a dynamic shellcode injector used to hide malicious payloads within existing PE files for evasion.
- Detects Shellter Trojan 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-19_8a733ea05ddd13eb371e8c43847a29ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-19_8a733ea05ddd13eb371e8c43847a29ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1628-0-0x0000026B5F6F0000-0x0000026B5F778000-memory.dmp
memory/1628-1-0x0000026B5F6F0000-0x0000026B5F778000-memory.dmp
memory/1628-2-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-5-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-7-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-8-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-10-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-12-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-16-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-28-0x00007FF472C80000-0x00007FF472C81000-memory.dmp
memory/1628-170-0x00007FFCA545F000-0x00007FFCA5460000-memory.dmp
memory/1628-386-0x00007FFCA5300000-0x00007FFCA5563000-memory.dmp
memory/1628-405-0x00007FF472ED0000-0x00007FF472ED7000-memory.dmp
memory/1628-411-0x0000026B5F810000-0x0000026B5F811000-memory.dmp
memory/1628-413-0x0000026B5F820000-0x0000026B5F821000-memory.dmp
memory/1628-412-0x0000026B5F820000-0x0000026B5F821000-memory.dmp
memory/1628-418-0x0000026B5F860000-0x0000026B5F861000-memory.dmp
memory/1628-436-0x0000026B5F8F0000-0x0000026B5F8F1000-memory.dmp
memory/1628-464-0x0000026B5F9D0000-0x0000026B5F9D2000-memory.dmp
memory/1628-463-0x0000026B5F9C0000-0x0000026B5F9C1000-memory.dmp
memory/1628-462-0x0000026B5F9C0000-0x0000026B5F9C1000-memory.dmp
memory/1628-461-0x0000026B5F9B0000-0x0000026B5F9B1000-memory.dmp
memory/1628-460-0x0000026B5F9B0000-0x0000026B5F9B1000-memory.dmp
memory/1628-459-0x0000026B5F9A0000-0x0000026B5F9A1000-memory.dmp
memory/1628-458-0x0000026B5F9A0000-0x0000026B5F9A1000-memory.dmp
memory/1628-457-0x0000026B5F990000-0x0000026B5F991000-memory.dmp
memory/1628-456-0x0000026B5F990000-0x0000026B5F991000-memory.dmp
memory/1628-455-0x0000026B5F980000-0x0000026B5F981000-memory.dmp
memory/1628-454-0x0000026B5F980000-0x0000026B5F981000-memory.dmp
memory/1628-453-0x0000026B5F970000-0x0000026B5F971000-memory.dmp
memory/1628-452-0x0000026B5F970000-0x0000026B5F971000-memory.dmp
memory/1628-451-0x0000026B5F960000-0x0000026B5F961000-memory.dmp
memory/1628-450-0x0000026B5F960000-0x0000026B5F961000-memory.dmp
memory/1628-449-0x0000026B5F950000-0x0000026B5F951000-memory.dmp
memory/1628-448-0x0000026B5F950000-0x0000026B5F951000-memory.dmp
memory/1628-447-0x0000026B5F940000-0x0000026B5F941000-memory.dmp
memory/1628-446-0x0000026B5F940000-0x0000026B5F941000-memory.dmp
memory/1628-445-0x0000026B5F930000-0x0000026B5F931000-memory.dmp
memory/1628-444-0x0000026B5F930000-0x0000026B5F931000-memory.dmp
memory/1628-443-0x0000026B5F920000-0x0000026B5F921000-memory.dmp
memory/1628-442-0x0000026B5F920000-0x0000026B5F921000-memory.dmp
memory/1628-441-0x0000026B5F910000-0x0000026B5F911000-memory.dmp
memory/1628-440-0x0000026B5F910000-0x0000026B5F911000-memory.dmp
memory/1628-439-0x0000026B5F900000-0x0000026B5F901000-memory.dmp
memory/1628-438-0x0000026B5F900000-0x0000026B5F901000-memory.dmp
memory/1628-437-0x0000026B5F8F0000-0x0000026B5F8F1000-memory.dmp
memory/1628-435-0x0000026B5F8E0000-0x0000026B5F8E1000-memory.dmp
memory/1628-434-0x0000026B5F8E0000-0x0000026B5F8E1000-memory.dmp
memory/1628-432-0x0000026B5F8D0000-0x0000026B5F8D1000-memory.dmp
memory/1628-429-0x0000026B5F8B0000-0x0000026B5F8B1000-memory.dmp
memory/1628-428-0x0000026B5F8B0000-0x0000026B5F8B1000-memory.dmp
memory/1628-427-0x0000026B5F8A0000-0x0000026B5F8A1000-memory.dmp
memory/1628-426-0x0000026B5F8A0000-0x0000026B5F8A1000-memory.dmp
memory/1628-425-0x0000026B5F890000-0x0000026B5F891000-memory.dmp
memory/1628-424-0x0000026B5F890000-0x0000026B5F891000-memory.dmp
memory/1628-420-0x0000026B5F870000-0x0000026B5F871000-memory.dmp
memory/1628-422-0x0000026B5F880000-0x0000026B5F881000-memory.dmp
memory/1628-419-0x0000026B5F860000-0x0000026B5F861000-memory.dmp
memory/1628-417-0x0000026B5F840000-0x0000026B5F841000-memory.dmp
memory/1628-416-0x0000026B5F840000-0x0000026B5F841000-memory.dmp
memory/1628-414-0x0000026B5F830000-0x0000026B5F831000-memory.dmp
memory/1628-431-0x0000026B5F8C0000-0x0000026B5F8C1000-memory.dmp
memory/1628-433-0x0000026B5F8D0000-0x0000026B5F8D1000-memory.dmp
memory/1628-430-0x0000026B5F8C0000-0x0000026B5F8C1000-memory.dmp
memory/1628-421-0x0000026B5F870000-0x0000026B5F871000-memory.dmp
memory/1628-423-0x0000026B5F880000-0x0000026B5F881000-memory.dmp
memory/1628-415-0x0000026B5F830000-0x0000026B5F831000-memory.dmp
memory/1628-410-0x0000026B5F810000-0x0000026B5F811000-memory.dmp
memory/1628-525-0x00007FFCA5300000-0x00007FFCA5563000-memory.dmp
memory/1628-870-0x00007FFCA5300000-0x00007FFCA5563000-memory.dmp
memory/1628-3116-0x0000026B5F6F0000-0x0000026B5F778000-memory.dmp