General
- Target 2026-09-03_e49de3c508f0e991b9bd78204be76c56_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 77.9MB
- Sample260903-y13xaavfrd
- SHA256 237b044f17a7ea8ffe529ab519b60bf17dd357ce84e3a2402f559d82422e7f51
- MD5 e49de3c508f0e991b9bd78204be76c56
- SHA1 55f95ee1ce3238816065f66370c361b5befcf24f
- SHA512 ed5328efd413304ee61e95dad2b79a91cdacb3d07739971cc94973919cffb1086d5017d288eb968df2118b98bcc31070927b35b373fa571f4768728b0e906c6a
- SSDEEP 1572864:YWB2GfdnAX186B09lcQDZqOFvvE6wFsg/47NL/:YlGFAXS6KpqO9E6Ssg61
- TLSH T1F308330CD67447D4E0BB9530AFD25906D1A87C8E2B76D6BB126DCDE88ECB4D24D60B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_e49de3c508f0e991b9bd78204be76c56_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_e49de3c508f0e991b9bd78204be76c56_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_e49de3c508f0e991b9bd78204be76c56_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 77.9MB
- SHA256 237b044f17a7ea8ffe529ab519b60bf17dd357ce84e3a2402f559d82422e7f51
- MD5 e49de3c508f0e991b9bd78204be76c56
- SHA1 55f95ee1ce3238816065f66370c361b5befcf24f
- SHA512 ed5328efd413304ee61e95dad2b79a91cdacb3d07739971cc94973919cffb1086d5017d288eb968df2118b98bcc31070927b35b373fa571f4768728b0e906c6a
- SSDEEP 1572864:YWB2GfdnAX186B09lcQDZqOFvvE6wFsg/47NL/:YlGFAXS6KpqO9E6Ssg61
- TLSH T1F308330CD67447D4E0BB9530AFD25906D1A87C8E2B76D6BB126DCDE88ECB4D24D60B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.