General
- Target 2026-10-25_c16d3f9de6570e61f46626ff1ab0490c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261026-qrbsfaes3x
- SHA256 921ed2f3d810b348660412f0f60b972e53b3704c042aa525d6eab591487778b6
- MD5 c16d3f9de6570e61f46626ff1ab0490c
- SHA1 6966bda0d42a27a738ff190060f6f7f2485779c6
- SHA512 1dfddeaff39ec5fb6d890c8d82c48f47ecb0fa5ca6ec9a2dbe104bb15b2e500e55d2ff9941984e7c4c195009b35e73ad1d3ce3138096021487d4c939f5ce3cbc
- SSDEEP 12288:m7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u6VK6j:Mcox7ATKj8+YmDXzKFHnj
- TLSH T11E053A157A49187DCAC6D475978F6923462834CF0E61BCFF83C9A2323EAA0B59F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_c16d3f9de6570e61f46626ff1ab0490c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_c16d3f9de6570e61f46626ff1ab0490c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_c16d3f9de6570e61f46626ff1ab0490c_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 921ed2f3d810b348660412f0f60b972e53b3704c042aa525d6eab591487778b6
- MD5 c16d3f9de6570e61f46626ff1ab0490c
- SHA1 6966bda0d42a27a738ff190060f6f7f2485779c6
- SHA512 1dfddeaff39ec5fb6d890c8d82c48f47ecb0fa5ca6ec9a2dbe104bb15b2e500e55d2ff9941984e7c4c195009b35e73ad1d3ce3138096021487d4c939f5ce3cbc
- SSDEEP 12288:m7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u6VK6j:Mcox7ATKj8+YmDXzKFHnj
- TLSH T11E053A157A49187DCAC6D475978F6923462834CF0E61BCFF83C9A2323EAA0B59F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application