General
- Target 2026-10-25_943c6afad60b8db376acb98310472423_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261026-ybdabsf19v
- SHA256 07ee45a79f472001ef0abe0138d1b10bd66ae6cc666c70c35e0705b3844ac3f8
- MD5 943c6afad60b8db376acb98310472423
- SHA1 9c44d8e84235e097e6fba7027cf32516f34f7aa7
- SHA512 1ce2eea72ebf6bab5b828a2e8e546f89427f8e80d136471ccfba447107909d89d5e50cf47c57b0dfb70cd683f51aea9aba572e74c48f59862e66370581d3564c
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86q:rcox7ATKj8+YmDXzKFiBq
- TLSH T160054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_943c6afad60b8db376acb98310472423_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_943c6afad60b8db376acb98310472423_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_943c6afad60b8db376acb98310472423_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 07ee45a79f472001ef0abe0138d1b10bd66ae6cc666c70c35e0705b3844ac3f8
- MD5 943c6afad60b8db376acb98310472423
- SHA1 9c44d8e84235e097e6fba7027cf32516f34f7aa7
- SHA512 1ce2eea72ebf6bab5b828a2e8e546f89427f8e80d136471ccfba447107909d89d5e50cf47c57b0dfb70cd683f51aea9aba572e74c48f59862e66370581d3564c
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86q:rcox7ATKj8+YmDXzKFiBq
- TLSH T160054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application