Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
27/09/2026, 09:04
General
- Target 2026-09-27_0b7da79b35475bbe4800c2aaaaed1046_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 18.5MB
- Sample260927-k1tfystemc
- SHA256 2ddb463c10ba5bd83ebd8b2610cc6bb4289ba63d75f959e2c4b95d2a41269528
Score
10/10
Malware Config
Signatures
- Family: SliverRAT
SliverRAT is an open source Adversary Emulation Framework.
- Sliver RAT v2 9 IoCs
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-27_0b7da79b35475bbe4800c2aaaaed1046_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-27_0b7da79b35475bbe4800c2aaaaed1046_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4616-0-0x000002CC55270000-0x000002CC564CC000-memory.dmp
memory/4616-1-0x000002CC577D0000-0x000002CC58A89000-memory.dmp
memory/4616-2-0x000002CC577D0000-0x000002CC58A89000-memory.dmp
memory/4616-3-0x000002CC577D0000-0x000002CC58A89000-memory.dmp
memory/4616-4-0x000002CC577D0000-0x000002CC58A89000-memory.dmp
memory/4616-5-0x000002CC577D0000-0x000002CC58A89000-memory.dmp
memory/4616-6-0x000002CC577D0000-0x000002CC58A89000-memory.dmp
memory/4616-7-0x000002CC577D0000-0x000002CC58A89000-memory.dmp
memory/4616-8-0x000002CC577D0000-0x000002CC58A89000-memory.dmp