General
- Target 2026-09-30_26d6327a1d64ca6fe306f6abf0feed76_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.1MB
- Sample261001-vsqp7sha32
- SHA256 8f0c79baf8719f6c96b5a699a7c7f67872d8e40f78234bc7176d18f8f0849c80
- MD5 26d6327a1d64ca6fe306f6abf0feed76
- SHA1 45b9b51465da7f66eca38635a260bc97a65d3c66
- SHA512 ff2ff54e8756a5ef86da0f3da56a9ed3f775d292cee2a8624e89df3b44691e6e0812176a550c25331a32dbe16b0bd77725f73b6460259c5f6189c58af6910fc1
- SSDEEP 49152:JLfAkWtOZvUrg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTq5AG8h3PLNxL4ru:StO8qRFTauXnKcQ
- TLSH T1BC168D0AE6B940E5C0BBD13D8A979647FAB13859C73197CB46A1875A1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Behavioral task
behavioral1
Sample
2026-09-30_26d6327a1d64ca6fe306f6abf0feed76_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_26d6327a1d64ca6fe306f6abf0feed76_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_26d6327a1d64ca6fe306f6abf0feed76_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.1MB
- SHA256 8f0c79baf8719f6c96b5a699a7c7f67872d8e40f78234bc7176d18f8f0849c80
- MD5 26d6327a1d64ca6fe306f6abf0feed76
- SHA1 45b9b51465da7f66eca38635a260bc97a65d3c66
- SHA512 ff2ff54e8756a5ef86da0f3da56a9ed3f775d292cee2a8624e89df3b44691e6e0812176a550c25331a32dbe16b0bd77725f73b6460259c5f6189c58af6910fc1
- SSDEEP 49152:JLfAkWtOZvUrg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTq5AG8h3PLNxL4ru:StO8qRFTauXnKcQ
- TLSH T1BC168D0AE6B940E5C0BBD13D8A979647FAB13859C73197CB46A1875A1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory