General
- Target 2026-10-11_4300472232f0dee6546ce2f5dda65db3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 426KB
- Sample261012-2873rabz8m
- SHA256 b435663e947f4711ed5c41296d836fc463e08a539b9a035100b4728de745775e
- MD5 4300472232f0dee6546ce2f5dda65db3
- SHA1 fbd27e7677955c51cea928040ed0d5fbfcc66520
- SHA512 056c0748b9c3d7e1ed39021fbbceee60977b380f4a8a3f3fc89b14b550f3046226faf4a333556c8150d7c5262a84f37a4a92d3ad346e75eeb108ff647c2dadec
- SSDEEP 12288:DzbANGIcymiSuf17H2FSTxEEPrJQ7oWA7hC9:/fjyH2FQPrYjug
- TLSH T1A2944B1692E901BCF0BBA3789D575902F77E780A03B1DADF07D085672E666D09E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_4300472232f0dee6546ce2f5dda65db3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_4300472232f0dee6546ce2f5dda65db3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_4300472232f0dee6546ce2f5dda65db3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 426KB
- SHA256 b435663e947f4711ed5c41296d836fc463e08a539b9a035100b4728de745775e
- MD5 4300472232f0dee6546ce2f5dda65db3
- SHA1 fbd27e7677955c51cea928040ed0d5fbfcc66520
- SHA512 056c0748b9c3d7e1ed39021fbbceee60977b380f4a8a3f3fc89b14b550f3046226faf4a333556c8150d7c5262a84f37a4a92d3ad346e75eeb108ff647c2dadec
- SSDEEP 12288:DzbANGIcymiSuf17H2FSTxEEPrJQ7oWA7hC9:/fjyH2FQPrYjug
- TLSH T1A2944B1692E901BCF0BBA3789D575902F77E780A03B1DADF07D085672E666D09E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext