General
- Target 2026-10-25_ba026de46d11ad39ec410cb677456005_cobalt-strike_icedid_luca-stealer_njrat_vidar
- Size 1.2MB
- Sample261026-rwv8baxtb1
- SHA256 d1824018d49d5e36c6bc3486d8c46c01f53f7881f55c380818c70438f973aeb2
- MD5 ba026de46d11ad39ec410cb677456005
- SHA1 314a164482fa7607d4e45640c7e57e1cff0cb8b5
- SHA512 c0e7e8b00017482f2acb36917b63da71e77968eb23bfda98a30bb81eef1756c9bf2a4c87932d5ebc3b11e887b06ea4465334b6b92d27e6456cf1a929dfcf16a6
- SSDEEP 12288:7nd4bi5ZdbWmM/ywvnqGByjJ7LxWqYKAvh3WhiFLJDLUX9T/w55nYZM5Kdnm:J4bi5rbWmM6wfqGGJvxaZaW9WGPl4pm
- TLSH T1F855497722A430ABC4B54EFAF680C131FF29754D3321DE698955952E2F3ADA421BF306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-25_ba026de46d11ad39ec410cb677456005_cobalt-strike_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_ba026de46d11ad39ec410cb677456005_cobalt-strike_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_ba026de46d11ad39ec410cb677456005_cobalt-strike_icedid_luca-stealer_njrat_vidar
- Size 1.2MB
- SHA256 d1824018d49d5e36c6bc3486d8c46c01f53f7881f55c380818c70438f973aeb2
- MD5 ba026de46d11ad39ec410cb677456005
- SHA1 314a164482fa7607d4e45640c7e57e1cff0cb8b5
- SHA512 c0e7e8b00017482f2acb36917b63da71e77968eb23bfda98a30bb81eef1756c9bf2a4c87932d5ebc3b11e887b06ea4465334b6b92d27e6456cf1a929dfcf16a6
- SSDEEP 12288:7nd4bi5ZdbWmM/ywvnqGByjJ7LxWqYKAvh3WhiFLJDLUX9T/w55nYZM5Kdnm:J4bi5rbWmM6wfqGGJvxaZaW9WGPl4pm
- TLSH T1F855497722A430ABC4B54EFAF680C131FF29754D3321DE698955952E2F3ADA421BF306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.