General
- Target 2026-10-22_f2019bd6afee4f85c2d75d0e0a3e2d61_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 829KB
- Sample261023-dafc3sbw7m
- SHA256 10912778ecd4991785757f4932cf7a5d316414b09e13f2a87c8c0b8001a33dd2
- MD5 f2019bd6afee4f85c2d75d0e0a3e2d61
- SHA1 2a96a7513e117df4571ce9a98484616e62fcb2e6
- SHA512 b1ebf16600400e39e02ea3c574a10a0e4540e6a21ab65219360a073cabbb648b885b53a6825b101d24a659def4c5f36a02a38d1e78eff1faa7b7e25c1c16588b
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86m:rcox7ATKj8+YmDXzKFiBm
- TLSH T1B8054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C9A2323E6A0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_f2019bd6afee4f85c2d75d0e0a3e2d61_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_f2019bd6afee4f85c2d75d0e0a3e2d61_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f2019bd6afee4f85c2d75d0e0a3e2d61_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 829KB
- SHA256 10912778ecd4991785757f4932cf7a5d316414b09e13f2a87c8c0b8001a33dd2
- MD5 f2019bd6afee4f85c2d75d0e0a3e2d61
- SHA1 2a96a7513e117df4571ce9a98484616e62fcb2e6
- SHA512 b1ebf16600400e39e02ea3c574a10a0e4540e6a21ab65219360a073cabbb648b885b53a6825b101d24a659def4c5f36a02a38d1e78eff1faa7b7e25c1c16588b
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86m:rcox7ATKj8+YmDXzKFiBm
- TLSH T1B8054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C9A2323E6A0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application