General
- Target 2026-10-23_22d5735f7fc1b9fe93841f1a1f8031c1_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 830KB
- Sample261023-rp47mscs2s
- SHA256 7e1be5ffb933c48855f94a9dbdd4e2f9fcb551f602ad8db46e04731797e69c3c
- MD5 22d5735f7fc1b9fe93841f1a1f8031c1
- SHA1 69ff8206360b764feead1eacdfa5a9c170d844f2
- SHA512 1dd03728408f9739210a9757cfb3b8763a56e4d4af3de16c2855fb32a2f0c3a43dec0b9874d62b515763d02c32cc6331a087bd89860e74ae7d9fcd4349f7d3c2
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6p:tcox7ATKj8+YmDXzKF0Yp
- TLSH T11C053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_22d5735f7fc1b9fe93841f1a1f8031c1_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_22d5735f7fc1b9fe93841f1a1f8031c1_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_22d5735f7fc1b9fe93841f1a1f8031c1_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 830KB
- SHA256 7e1be5ffb933c48855f94a9dbdd4e2f9fcb551f602ad8db46e04731797e69c3c
- MD5 22d5735f7fc1b9fe93841f1a1f8031c1
- SHA1 69ff8206360b764feead1eacdfa5a9c170d844f2
- SHA512 1dd03728408f9739210a9757cfb3b8763a56e4d4af3de16c2855fb32a2f0c3a43dec0b9874d62b515763d02c32cc6331a087bd89860e74ae7d9fcd4349f7d3c2
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6p:tcox7ATKj8+YmDXzKF0Yp
- TLSH T11C053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application