General
- Target 2026-09-04_2d7c9a23cccb3e1226327afd467b8f3e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- Sample260905-sr5fvstzcv
- SHA256 d37cdd1689ace15efd8e2e211b11f356e8d0905d6a55f9fb86e7c86f7c5bdce3
- MD5 2d7c9a23cccb3e1226327afd467b8f3e
- SHA1 0ae2c09ff63d013916a476e3d0eeea96d1291a92
- SHA512 22e483fb7427262d2bdaf9ac7ceb765811cf595f25b4627f0ee42ba259ba5cc428370016f50b42e6ca7c0d93b6e26cfa2f32cccafc9d01f8a7f739866afcf475
- SSDEEP 196608:JzlkDd8MgkcBAz3BRyKBxfo4NbaS4Es/IED1dhfc1oBs9X:jkd8MzCO2KPo2VExfgyW
- TLSH T110B63319EAB409F8D07BE675CD434A02F7F6B85C1725E75F126867820F272A09D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2d7c9a23cccb3e1226327afd467b8f3e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_2d7c9a23cccb3e1226327afd467b8f3e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_2d7c9a23cccb3e1226327afd467b8f3e_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.0MB
- SHA256 d37cdd1689ace15efd8e2e211b11f356e8d0905d6a55f9fb86e7c86f7c5bdce3
- MD5 2d7c9a23cccb3e1226327afd467b8f3e
- SHA1 0ae2c09ff63d013916a476e3d0eeea96d1291a92
- SHA512 22e483fb7427262d2bdaf9ac7ceb765811cf595f25b4627f0ee42ba259ba5cc428370016f50b42e6ca7c0d93b6e26cfa2f32cccafc9d01f8a7f739866afcf475
- SSDEEP 196608:JzlkDd8MgkcBAz3BRyKBxfo4NbaS4Es/IED1dhfc1oBs9X:jkd8MzCO2KPo2VExfgyW
- TLSH T110B63319EAB409F8D07BE675CD434A02F7F6B85C1725E75F126867820F272A09D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE