General
- Target 2026-09-10_cea2de5b322aa88ab4cc7e3b9cff5a8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 47.4MB
- Sample260910-mgjthsge65
- SHA256 dab9c86bd45a1789d54bec4aaadf5219c60ec793233419a159e221ed374ebd00
- MD5 cea2de5b322aa88ab4cc7e3b9cff5a8f
- SHA1 bd6314ba37f3fef3507a9383ea5c3016239a6960
- SHA512 0de386f39b98a537c4a3e7fb6f0340e1bf680ac3a82349f43e528f116cfa444ee895f1f3c27686af048c483ed540dd2d5738e2db3039a5e8d99ed63403f2e973
- SSDEEP 786432:7fv1xQyrkn8oajWmcHvzNe6G+lbtRA+Je03KtJ0jTVIePnCCfdjkI2I:LQ8oajWm4zNe6G+lbHA+J2tWPjPCC
- TLSH T192B7330029D0521DC99A8278DAEA66AF443E3D3D1F8436EB9650B1731E2D6F07FCD1B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_cea2de5b322aa88ab4cc7e3b9cff5a8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_cea2de5b322aa88ab4cc7e3b9cff5a8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_cea2de5b322aa88ab4cc7e3b9cff5a8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 47.4MB
- SHA256 dab9c86bd45a1789d54bec4aaadf5219c60ec793233419a159e221ed374ebd00
- MD5 cea2de5b322aa88ab4cc7e3b9cff5a8f
- SHA1 bd6314ba37f3fef3507a9383ea5c3016239a6960
- SHA512 0de386f39b98a537c4a3e7fb6f0340e1bf680ac3a82349f43e528f116cfa444ee895f1f3c27686af048c483ed540dd2d5738e2db3039a5e8d99ed63403f2e973
- SSDEEP 786432:7fv1xQyrkn8oajWmcHvzNe6G+lbtRA+Je03KtJ0jTVIePnCCfdjkI2I:LQ8oajWm4zNe6G+lbHA+J2tWPjPCC
- TLSH T192B7330029D0521DC99A8278DAEA66AF443E3D3D1F8436EB9650B1731E2D6F07FCD1B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE
-
Loads dropped DLL