General
- Target 2026-08-22_d40f6c14630120dd8345e38d3cdd3176_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- Sample260822-3l24nagg68
- SHA256 5ab7fda02e5547d49959f3958573d7eb6b66f9cef3a3407f6981b6a730f5c554
- MD5 d40f6c14630120dd8345e38d3cdd3176
- SHA1 763ff2f9b3c4250179f4773505ce1094f6cbb7ef
- SHA512 dbfa806cbbf4de2fefe4b49f5d4ddba54f260d30bb5211a218f252a7a8cd1473d26d7637b373d4b8245c7dfc757b94dd4ab8d68541455141d3bcf8a0459d18ce
- SSDEEP 196608:JzVYkDd8MKjn2F5bJoXAtf/zRsiPxSxfZNKWqE4LQNs9i:DYkd8MKLYxtfP5SpZND54LQN
- TLSH T132B63315E7A809F8E476E7748C514612E673785E2361EA5F13E46AA30F533E0EE3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_d40f6c14630120dd8345e38d3cdd3176_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_d40f6c14630120dd8345e38d3cdd3176_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_d40f6c14630120dd8345e38d3cdd3176_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- SHA256 5ab7fda02e5547d49959f3958573d7eb6b66f9cef3a3407f6981b6a730f5c554
- MD5 d40f6c14630120dd8345e38d3cdd3176
- SHA1 763ff2f9b3c4250179f4773505ce1094f6cbb7ef
- SHA512 dbfa806cbbf4de2fefe4b49f5d4ddba54f260d30bb5211a218f252a7a8cd1473d26d7637b373d4b8245c7dfc757b94dd4ab8d68541455141d3bcf8a0459d18ce
- SSDEEP 196608:JzVYkDd8MKjn2F5bJoXAtf/zRsiPxSxfZNKWqE4LQNs9i:DYkd8MKLYxtfP5SpZND54LQN
- TLSH T132B63315E7A809F8E476E7748C514612E673785E2361EA5F13E46AA30F533E0EE3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE