General
- Target 2026-10-02_6348e9020ab4bb61d5f73d25a9b32bb2_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.1MB
- Sample261003-ngsl4axcjf
- SHA256 25bb309bd2570dfea7789a8550a42851d78ca6b17165087892d1d76cefc4b89e
- MD5 6348e9020ab4bb61d5f73d25a9b32bb2
- SHA1 43472d9cb2d93fd0c777b46ded808831a7e5ad2b
- SHA512 d4fc6ff3274745b50bb8c596cb8ba1f046a6bb1836683ed32bbbb01e910debee73e0876a6418d108f2d77f7c74980a0eeda9c27b247ac2550c7540e9d3b9e4de
- SSDEEP 49152:Ai0BdWtOZvUrg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTqiucw619UaLbVbg:ftO8qRFTauXhQ9UCbVb
- TLSH T1E8167C4AE6B940E4C0BBD13D8A979657FAB13859C73197CB46A1835A1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Behavioral task
behavioral1
Sample
2026-10-02_6348e9020ab4bb61d5f73d25a9b32bb2_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_6348e9020ab4bb61d5f73d25a9b32bb2_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_6348e9020ab4bb61d5f73d25a9b32bb2_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.1MB
- SHA256 25bb309bd2570dfea7789a8550a42851d78ca6b17165087892d1d76cefc4b89e
- MD5 6348e9020ab4bb61d5f73d25a9b32bb2
- SHA1 43472d9cb2d93fd0c777b46ded808831a7e5ad2b
- SHA512 d4fc6ff3274745b50bb8c596cb8ba1f046a6bb1836683ed32bbbb01e910debee73e0876a6418d108f2d77f7c74980a0eeda9c27b247ac2550c7540e9d3b9e4de
- SSDEEP 49152:Ai0BdWtOZvUrg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTqiucw619UaLbVbg:ftO8qRFTauXhQ9UCbVb
- TLSH T1E8167C4AE6B940E4C0BBD13D8A979657FAB13859C73197CB46A1835A1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory