General
- Target 2026-10-22_0a2f5764c97f950f0d4caeaa323d48ae_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 829KB
- Sample261024-16xcssfh56
- SHA256 65bd99ab89cb1a91567e08a8b83a56b7f1743af65acdbb2a684e499246f0fca3
- MD5 0a2f5764c97f950f0d4caeaa323d48ae
- SHA1 5d074f06acd5e6ff67f9991afc083b45056c515a
- SHA512 97e260bc1fd78a660f33dae271328d25fd193152b564d50cce8ddfb8bb88d515fe919d68dbd3b9736a4adf10b650c4cf15c985c27ec7c05870a2aa19aa259147
- SSDEEP 12288:m7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u6VK6Q:Mcox7ATKj8+YmDXzKFHnQ
- TLSH T1BA053A157A49187DCAC6D475978F6923462834CF0E61BCFF83C9A2323EAA0B59F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_0a2f5764c97f950f0d4caeaa323d48ae_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_0a2f5764c97f950f0d4caeaa323d48ae_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_0a2f5764c97f950f0d4caeaa323d48ae_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 829KB
- SHA256 65bd99ab89cb1a91567e08a8b83a56b7f1743af65acdbb2a684e499246f0fca3
- MD5 0a2f5764c97f950f0d4caeaa323d48ae
- SHA1 5d074f06acd5e6ff67f9991afc083b45056c515a
- SHA512 97e260bc1fd78a660f33dae271328d25fd193152b564d50cce8ddfb8bb88d515fe919d68dbd3b9736a4adf10b650c4cf15c985c27ec7c05870a2aa19aa259147
- SSDEEP 12288:m7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u6VK6Q:Mcox7ATKj8+YmDXzKFHnQ
- TLSH T1BA053A157A49187DCAC6D475978F6923462834CF0E61BCFF83C9A2323EAA0B59F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application