Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 15:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_2d07c538ba95f5a3a5e742bdaa903034_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_2d07c538ba95f5a3a5e742bdaa903034_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-02_2d07c538ba95f5a3a5e742bdaa903034_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 931KB
- Sample261003-sp43bas1ez
- SHA256 142ac61fccdc3fbd7d9d3880757298de438a842dfb2cca9d976581eacf227a85
- MD5 2d07c538ba95f5a3a5e742bdaa903034
- SHA1 a2ad1b7d67f39f6c2ef28657db4885d571e10021
- SHA512 3b99af6d47ef778076bd10ef09a4655dbbaf5db9f3c94a3e609d4b53afed7272f1db587377438174a245d55895075bd4b2388eb922b4572ce379538716bc0c14
- SSDEEP 24576:21Y5jnkJE+Lbs7dt3S/m3VsqHdHtfsE/9jki4JfLdmuUk:2yeTs7dt3ymsqHHfsE/9jki4pLUuUk
- TLSH T16915E019F7E800F9E5778234CD628502F672BC690BB09BAF13A4465A1F376D19D3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3448 2026-10-02_2d07c538ba95f5a3a5e742bdaa903034_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-02_2d07c538ba95f5a3a5e742bdaa903034_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-02_2d07c538ba95f5a3a5e742bdaa903034_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3448