General
- Target 2026-09-15_39e9b4b38361a3c48443939e17e7f245_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.3MB
- Sample260915-2t4rsatdqe
- SHA256 29ede6bab7bfbbcc349768882c65adfbedb7a207864c77e11e16fc4be6d84146
- MD5 39e9b4b38361a3c48443939e17e7f245
- SHA1 60c09cbb92fbfbdf62838dcf9e411f27b0c8d98a
- SHA512 8ce55195bb02edb9124f12a04a12b71f128aa2e04a32d080192e80ae1dfb71660c794664388e941fd6cd7bf7f77601aef1b3d6ef13128894c31f0da7fd7a28a3
- SSDEEP 24576:dXXQfuvSwhiiPvJbDo/RuTDko8vjQ4zxraJ1Q:JQylBkID58E4
- TLSH T14B55C01A7B9D01FCE0A7E23889965906F7B1744A13719ADF43E04A6A2F276F15F3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-15_39e9b4b38361a3c48443939e17e7f245_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-15_39e9b4b38361a3c48443939e17e7f245_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.3MB
- SHA256 29ede6bab7bfbbcc349768882c65adfbedb7a207864c77e11e16fc4be6d84146
- MD5 39e9b4b38361a3c48443939e17e7f245
- SHA1 60c09cbb92fbfbdf62838dcf9e411f27b0c8d98a
- SHA512 8ce55195bb02edb9124f12a04a12b71f128aa2e04a32d080192e80ae1dfb71660c794664388e941fd6cd7bf7f77601aef1b3d6ef13128894c31f0da7fd7a28a3
- SSDEEP 24576:dXXQfuvSwhiiPvJbDo/RuTDko8vjQ4zxraJ1Q:JQylBkID58E4
- TLSH T14B55C01A7B9D01FCE0A7E23889965906F7B1744A13719ADF43E04A6A2F276F15F3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stealc stealer Version 3
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1