General
- Target 2026-10-27_e8ca336d90548bb7ddf94b4470ab7309_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261027-3krarsws2q
- SHA256 77b5db9f8cd80f134227288d7b51d5f0af90b3246350755ae141d5d9273a2ae5
- MD5 e8ca336d90548bb7ddf94b4470ab7309
- SHA1 2d5563abde904c79ae07a336537ba46ec48ba9f9
- SHA512 5671e2dc9afdaa503748a07f98e4cc9a8ad33c95066e6559a30e4f2ee36c19f618ee20f44b86f1de584d5411b2ccbe105bd0c7b0a3c4b530c4559d86f5d6ef81
- SSDEEP 12288:j7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u/VF6xx:lcox7ATKj8+YmDXzKF8gxx
- TLSH T103053B157A49187DC9C6D475978B6A23492874CF0E61BCFF83C9A2323EAA0B4DF36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-27_e8ca336d90548bb7ddf94b4470ab7309_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_e8ca336d90548bb7ddf94b4470ab7309_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_e8ca336d90548bb7ddf94b4470ab7309_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 77b5db9f8cd80f134227288d7b51d5f0af90b3246350755ae141d5d9273a2ae5
- MD5 e8ca336d90548bb7ddf94b4470ab7309
- SHA1 2d5563abde904c79ae07a336537ba46ec48ba9f9
- SHA512 5671e2dc9afdaa503748a07f98e4cc9a8ad33c95066e6559a30e4f2ee36c19f618ee20f44b86f1de584d5411b2ccbe105bd0c7b0a3c4b530c4559d86f5d6ef81
- SSDEEP 12288:j7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u/VF6xx:lcox7ATKj8+YmDXzKF8gxx
- TLSH T103053B157A49187DC9C6D475978B6A23492874CF0E61BCFF83C9A2323EAA0B4DF36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application