General
- Target 2026-09-12_e6350bad33766ef9fd90fe063c7e8a01_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 558KB
- Sample260912-s6gncazdkh
- SHA256 3e5ce9acc48434cdffad5cff20c796ecce0a89811b215fe0cf9a331e4cce4a79
- MD5 e6350bad33766ef9fd90fe063c7e8a01
- SHA1 85304d9e83ba2618c1afcc9e2b0f96004b406db4
- SHA512 5c6d970c848242a9d06e8d3969c18f0dc9e29218f3ecd0441969aa34082a24521582f3aef07b3aa1847b97263c02a70b37fe40fb56518903b6253c055b9c63b3
- SSDEEP 12288:zNI7Xcb2O1VNNDbBeVfbU1xbbX/jguW/p/qC:pI7MhVWur/jgu
- TLSH T19CC47D5A629C43F8E1A7E17889864506F7B67846132197CF03F04AAB2F276E15F3F361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_e6350bad33766ef9fd90fe063c7e8a01_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_e6350bad33766ef9fd90fe063c7e8a01_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_e6350bad33766ef9fd90fe063c7e8a01_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 558KB
- SHA256 3e5ce9acc48434cdffad5cff20c796ecce0a89811b215fe0cf9a331e4cce4a79
- MD5 e6350bad33766ef9fd90fe063c7e8a01
- SHA1 85304d9e83ba2618c1afcc9e2b0f96004b406db4
- SHA512 5c6d970c848242a9d06e8d3969c18f0dc9e29218f3ecd0441969aa34082a24521582f3aef07b3aa1847b97263c02a70b37fe40fb56518903b6253c055b9c63b3
- SSDEEP 12288:zNI7Xcb2O1VNNDbBeVfbU1xbbX/jguW/p/qC:pI7MhVWur/jgu
- TLSH T19CC47D5A629C43F8E1A7E17889864506F7B67846132197CF03F04AAB2F276E15F3F361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.