General
- Target 2026-10-23_1cd161486657ef57e8668d81a848d58a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261023-ryfweasy8k
- SHA256 426ea82eef08d83d2145a6572e39b8d2edff93aea458b8d370e2c951ff373235
- MD5 1cd161486657ef57e8668d81a848d58a
- SHA1 ce2da1987768a0e2c7110e662aac3f4bde51c397
- SHA512 2808c28f24f6962f23784cf8c6370405133d7125afb7e7d6f44a04fa1cc3a235295e72668ac7b8778ec36d05b9e8e7f2cfdeeb0c7adf7e176e9528aa7b0b5919
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86OK:rcox7ATKj8+YmDXzKFiBOK
- TLSH T183054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C9A2323E6A0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_1cd161486657ef57e8668d81a848d58a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_1cd161486657ef57e8668d81a848d58a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_1cd161486657ef57e8668d81a848d58a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 426ea82eef08d83d2145a6572e39b8d2edff93aea458b8d370e2c951ff373235
- MD5 1cd161486657ef57e8668d81a848d58a
- SHA1 ce2da1987768a0e2c7110e662aac3f4bde51c397
- SHA512 2808c28f24f6962f23784cf8c6370405133d7125afb7e7d6f44a04fa1cc3a235295e72668ac7b8778ec36d05b9e8e7f2cfdeeb0c7adf7e176e9528aa7b0b5919
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86OK:rcox7ATKj8+YmDXzKFiBOK
- TLSH T183054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C9A2323E6A0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application