General
- Target 2026-09-03_c98b067b49f3738f657d6cdf723e8e11_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 569KB
- Sample260903-2phnraca86
- SHA256 ad409edb672cbd111e6874c6b9639bdefee63b626367a9c5cdc49ed4af3d48a1
- MD5 c98b067b49f3738f657d6cdf723e8e11
- SHA1 ec256bce32910d81ae3cfe420fb9d826d4f35931
- SHA512 50cc289722141017184722c02b521aa8311ec05bf40491064450c353f72ba10d2a1e47ca43c45854a85f8891616c3d93647adbcbbf4188bd3e81520ef068e47f
- SSDEEP 12288:JngM8K8P4ElXddah8kyDIZQmJ3Bwevg8jbXQt/JOeRUe:JngHKYfXTkXy0ZQdev7fqUiUe
- TLSH T1BFC4AF19E7E804FDE4B7E178D9524902E3BA7C4D0771D78F13A866562F336A08E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_c98b067b49f3738f657d6cdf723e8e11_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_c98b067b49f3738f657d6cdf723e8e11_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_c98b067b49f3738f657d6cdf723e8e11_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 569KB
- SHA256 ad409edb672cbd111e6874c6b9639bdefee63b626367a9c5cdc49ed4af3d48a1
- MD5 c98b067b49f3738f657d6cdf723e8e11
- SHA1 ec256bce32910d81ae3cfe420fb9d826d4f35931
- SHA512 50cc289722141017184722c02b521aa8311ec05bf40491064450c353f72ba10d2a1e47ca43c45854a85f8891616c3d93647adbcbbf4188bd3e81520ef068e47f
- SSDEEP 12288:JngM8K8P4ElXddah8kyDIZQmJ3Bwevg8jbXQt/JOeRUe:JngHKYfXTkXy0ZQdev7fqUiUe
- TLSH T1BFC4AF19E7E804FDE4B7E178D9524902E3BA7C4D0771D78F13A866562F336A08E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.