General
- Target 2026-10-26_e743913b8289e8510f3e6ef7579bddca_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261027-ef13eax16p
- SHA256 ae8115c47c20c0b3357470c34736b58d38ef2eb2425e196e71c25986530c019e
- MD5 e743913b8289e8510f3e6ef7579bddca
- SHA1 a97b9f74592ff9fefc3739b21f6e22744e1c8b73
- SHA512 2e29f261e30b6163b0a7d7cf1ccb4255cee37a929e75b5eacc2a36efcb692baab3284168fad633d781ee9f818a3c5dd8fdc30460d07b68918310daab6b8c5ea2
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6P:tcox7ATKj8+YmDXzKF0YP
- TLSH T1CB053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_e743913b8289e8510f3e6ef7579bddca_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_e743913b8289e8510f3e6ef7579bddca_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_e743913b8289e8510f3e6ef7579bddca_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 ae8115c47c20c0b3357470c34736b58d38ef2eb2425e196e71c25986530c019e
- MD5 e743913b8289e8510f3e6ef7579bddca
- SHA1 a97b9f74592ff9fefc3739b21f6e22744e1c8b73
- SHA512 2e29f261e30b6163b0a7d7cf1ccb4255cee37a929e75b5eacc2a36efcb692baab3284168fad633d781ee9f818a3c5dd8fdc30460d07b68918310daab6b8c5ea2
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6P:tcox7ATKj8+YmDXzKF0YP
- TLSH T1CB053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application