General
- Target 2026-08-23_9a97e7139bfb0b6778ea87bcb3433c9a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- Sample260824-erg4nsca78
- SHA256 5d20e839ffc1dc41d71a44c3e55bef36864e3294a7bdb00a0b24866722a8ee76
- MD5 9a97e7139bfb0b6778ea87bcb3433c9a
- SHA1 bdb6c7b1499233fe5eba496b9b0b45e8f9a54803
- SHA512 7ec6f2c871fee3b9f65b453308849b3198703da1d5ce86bc0c66104ba14bccd5fe5df0a557527a3080cee8e34088e8da04135a7d6256848541f59729ad774485
- SSDEEP 196608:JzVkDd8MRi92Z8TMUbNjjHPZ1FL0L7kQmc0KZlGs+qxi34cs9C:Tkd8ME9Z3HjFIL7kz1s+c61F
- TLSH T1B0B63319EBE444F9D4A7D1B48D528613E6B77C0C1362EB4F27A4AAD51F271E08E2EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_9a97e7139bfb0b6778ea87bcb3433c9a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9a97e7139bfb0b6778ea87bcb3433c9a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9a97e7139bfb0b6778ea87bcb3433c9a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- SHA256 5d20e839ffc1dc41d71a44c3e55bef36864e3294a7bdb00a0b24866722a8ee76
- MD5 9a97e7139bfb0b6778ea87bcb3433c9a
- SHA1 bdb6c7b1499233fe5eba496b9b0b45e8f9a54803
- SHA512 7ec6f2c871fee3b9f65b453308849b3198703da1d5ce86bc0c66104ba14bccd5fe5df0a557527a3080cee8e34088e8da04135a7d6256848541f59729ad774485
- SSDEEP 196608:JzVkDd8MRi92Z8TMUbNjjHPZ1FL0L7kQmc0KZlGs+qxi34cs9C:Tkd8ME9Z3HjFIL7kz1s+c61F
- TLSH T1B0B63319EBE444F9D4A7D1B48D528613E6B77C0C1362EB4F27A4AAD51F271E08E2EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE