General
- Target 2026-09-05_7e90654bfd304013c3f7591af92de466_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.3MB
- Sample260907-s33fmsx1ft
- SHA256 92b5c470d41500fc3acd754e826ae11970f40cdf16279326f9ea001d291683a6
- MD5 7e90654bfd304013c3f7591af92de466
- SHA1 85e7f1dc688e05f602e16d16cc9bee90c9da89de
- SHA512 03f5547b098e79500ef7a0d5cc220402d655c7e6efe2ca42c1e3be87a5e5e635627f7d5254ed3ade107e24dd394e0e05d477c9f364c418b1ec9348b879de9e5f
- SSDEEP 24576:51DS7atyFXoNEw5dI1fCDFmt+Vm5L1Y3o364qrgx0y:XDojF4z5WVCRmkVJ46pgx0y
- TLSH T1E755021CE2EC00FEE123A17C8E584807E2B77C4E2762478B279967592F577A1DE2E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_7e90654bfd304013c3f7591af92de466_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_7e90654bfd304013c3f7591af92de466_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_7e90654bfd304013c3f7591af92de466_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.3MB
- SHA256 92b5c470d41500fc3acd754e826ae11970f40cdf16279326f9ea001d291683a6
- MD5 7e90654bfd304013c3f7591af92de466
- SHA1 85e7f1dc688e05f602e16d16cc9bee90c9da89de
- SHA512 03f5547b098e79500ef7a0d5cc220402d655c7e6efe2ca42c1e3be87a5e5e635627f7d5254ed3ade107e24dd394e0e05d477c9f364c418b1ec9348b879de9e5f
- SSDEEP 24576:51DS7atyFXoNEw5dI1fCDFmt+Vm5L1Y3o364qrgx0y:XDojF4z5WVCRmkVJ46pgx0y
- TLSH T1E755021CE2EC00FEE123A17C8E584807E2B77C4E2762478B279967592F577A1DE2E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies security service
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE