General
- Target 2026-10-22_97fe4b91c47e2a749d5d07fa2ebca41a_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 2.9MB
- Sample261024-eajwyafv9z
- SHA256 6bc3ca5f6077a0fea0f5ecf3d97a3440bdea722512df1988620b9f97a34d7bc9
- MD5 97fe4b91c47e2a749d5d07fa2ebca41a
- SHA1 6e02e702373f6d14b01968faf547cf885390a463
- SHA512 ef84aebb283e4ead99b2b25e03b37c1f63426c6b6202ce15146f45f3a984aca9cd2b3ea110ed1fab09f56bb9600f762805b511a5162e9fb742f7f84c6d5cc780
- SSDEEP 49152:q1XWR1w5iqD3SKIXkkti+aaqu0RejDlgRLd3J+kTMjT+vKpGqJ+dX:oXWRWgqOKAo4H5U7omdX
- TLSH T164E52311A3A489F5D86B823DC6928A55FE72780A1330D78F1BA0964A2F337F0DD3DB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-22_97fe4b91c47e2a749d5d07fa2ebca41a_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_97fe4b91c47e2a749d5d07fa2ebca41a_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 2.9MB
- SHA256 6bc3ca5f6077a0fea0f5ecf3d97a3440bdea722512df1988620b9f97a34d7bc9
- MD5 97fe4b91c47e2a749d5d07fa2ebca41a
- SHA1 6e02e702373f6d14b01968faf547cf885390a463
- SHA512 ef84aebb283e4ead99b2b25e03b37c1f63426c6b6202ce15146f45f3a984aca9cd2b3ea110ed1fab09f56bb9600f762805b511a5162e9fb742f7f84c6d5cc780
- SSDEEP 49152:q1XWR1w5iqD3SKIXkkti+aaqu0RejDlgRLd3J+kTMjT+vKpGqJ+dX:oXWRWgqOKAo4H5U7omdX
- TLSH T164E52311A3A489F5D86B823DC6928A55FE72780A1330D78F1BA0964A2F337F0DD3DB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.