General
- Target 2026-08-19_3504455361824d0caa0349bcf17672e3_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 10.2MB
- Sample260820-atg48scm2v
- SHA256 e5d70e608a0bf0d6a08012f6454c3bb9ad45c95f6153c07d1a9cdc5cd039f436
- MD5 3504455361824d0caa0349bcf17672e3
- SHA1 1a6445b48048837d7dde7ef70c6fb9db75ad23e5
- SHA512 0b7dd8fcfa46fa7a180d325d16b606419e67f640a56926ab3f892f1c70926abefa8338d34589050bf54e8a10c306a2b0ed9ed3699add054a088fdbf0063d5ae7
- SSDEEP 196608:iDdtvz1dkHXl5PkE/mCrZdpe3rxiNM3PxyL6B9zFgYeqo/Mi:wdZTkHXhfrZ23rFZc6z6lMi
- TLSH T1CBB62342A365C6FCC46BC234C6925B0FF37578110321DBDB67AC6A265F53AE06EBA311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_3504455361824d0caa0349bcf17672e3_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_3504455361824d0caa0349bcf17672e3_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_3504455361824d0caa0349bcf17672e3_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 10.2MB
- SHA256 e5d70e608a0bf0d6a08012f6454c3bb9ad45c95f6153c07d1a9cdc5cd039f436
- MD5 3504455361824d0caa0349bcf17672e3
- SHA1 1a6445b48048837d7dde7ef70c6fb9db75ad23e5
- SHA512 0b7dd8fcfa46fa7a180d325d16b606419e67f640a56926ab3f892f1c70926abefa8338d34589050bf54e8a10c306a2b0ed9ed3699add054a088fdbf0063d5ae7
- SSDEEP 196608:iDdtvz1dkHXl5PkE/mCrZdpe3rxiNM3PxyL6B9zFgYeqo/Mi:wdZTkHXhfrZ23rFZc6z6lMi
- TLSH T1CBB62342A365C6FCC46BC234C6925B0FF37578110321DBDB67AC6A265F53AE06EBA311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger