General
- Target 2026-10-10_f0237a476100aa4bd70993e2d3501cd9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- Sample261010-1evd5as13j
- SHA256 0d064fb63c770e77f366ba2fd5eb8a2aff2b98258f39f536d9855069573e6bf8
- MD5 f0237a476100aa4bd70993e2d3501cd9
- SHA1 d6cf1d220f3c05a19f2975a039aa6338b31d1350
- SHA512 4e9f864f89070dcd52f5cd1778865e3037f739d5b25aa4eb55c5e318c7dc62a627e70460fe37a0b707e87ef9460c0b351c2ecccb59caed29c481a0f474177a60
- SSDEEP 24576:eo9KaRNS1XuMwOBjmO7wNtFaFSzQ8spJQlWbFCvlYr8knG7dO7l:aaRJ2Bj+oGQ8spGlWb4CQp7dO
- TLSH T10B85D099A7F801F8F0F7A678C9A20502EB3B784607719B4F03E4857B2F676519E29731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_f0237a476100aa4bd70993e2d3501cd9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_f0237a476100aa4bd70993e2d3501cd9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_f0237a476100aa4bd70993e2d3501cd9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- SHA256 0d064fb63c770e77f366ba2fd5eb8a2aff2b98258f39f536d9855069573e6bf8
- MD5 f0237a476100aa4bd70993e2d3501cd9
- SHA1 d6cf1d220f3c05a19f2975a039aa6338b31d1350
- SHA512 4e9f864f89070dcd52f5cd1778865e3037f739d5b25aa4eb55c5e318c7dc62a627e70460fe37a0b707e87ef9460c0b351c2ecccb59caed29c481a0f474177a60
- SSDEEP 24576:eo9KaRNS1XuMwOBjmO7wNtFaFSzQ8spJQlWbFCvlYr8knG7dO7l:aaRJ2Bj+oGQ8spGlWb4CQp7dO
- TLSH T10B85D099A7F801F8F0F7A678C9A20502EB3B784607719B4F03E4857B2F676519E29731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1