General
- Target 2026-10-22_dcb0272a104b8b57fcaf3b07686ae7a9_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261023-vp3wcsdc56
- SHA256 4ae8cbbee6839414f4dae6048f324170c0c4a752dc06ec9120670fd9a53cd635
- MD5 dcb0272a104b8b57fcaf3b07686ae7a9
- SHA1 f5e48a5fcd68d4771f1aea966f978267b79de20b
- SHA512 1d5b7166ef17b9b7e6d893e98e6f373665db88b8d99c2da10d554790264de212593e846439a4df7d10a1a678af62d86f2947ce3f523bfd6117fe8e238c3d5efb
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6Z:tcox7ATKj8+YmDXzKF0YZ
- TLSH T17A053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_dcb0272a104b8b57fcaf3b07686ae7a9_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_dcb0272a104b8b57fcaf3b07686ae7a9_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_dcb0272a104b8b57fcaf3b07686ae7a9_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 4ae8cbbee6839414f4dae6048f324170c0c4a752dc06ec9120670fd9a53cd635
- MD5 dcb0272a104b8b57fcaf3b07686ae7a9
- SHA1 f5e48a5fcd68d4771f1aea966f978267b79de20b
- SHA512 1d5b7166ef17b9b7e6d893e98e6f373665db88b8d99c2da10d554790264de212593e846439a4df7d10a1a678af62d86f2947ce3f523bfd6117fe8e238c3d5efb
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6Z:tcox7ATKj8+YmDXzKF0YZ
- TLSH T17A053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application