General
- Target 2026-10-29_10f31220e49b48fdb6b9b5cc8f90a3fd_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 832KB
- Sample261029-vtmpyaew6p
- SHA256 839faddfbd063ccf3126f2522e9088413d3c524488f9bccae07b0a996aaa4d82
- MD5 10f31220e49b48fdb6b9b5cc8f90a3fd
- SHA1 939f8f357367f3f5437b357fc969bc4a9c2e384e
- SHA512 0ddcf522a41db081d70457b5dbd1dce5d029fb6e789c720516854f6c8bc226c06f664233d06620e44cdefbd32aa05f7a7fd570085a650468665c2c35758557f9
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6d:tcox7ATKj8+YmDXzKF0Yd
- TLSH T180053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-29_10f31220e49b48fdb6b9b5cc8f90a3fd_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-29_10f31220e49b48fdb6b9b5cc8f90a3fd_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-29_10f31220e49b48fdb6b9b5cc8f90a3fd_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 832KB
- SHA256 839faddfbd063ccf3126f2522e9088413d3c524488f9bccae07b0a996aaa4d82
- MD5 10f31220e49b48fdb6b9b5cc8f90a3fd
- SHA1 939f8f357367f3f5437b357fc969bc4a9c2e384e
- SHA512 0ddcf522a41db081d70457b5dbd1dce5d029fb6e789c720516854f6c8bc226c06f664233d06620e44cdefbd32aa05f7a7fd570085a650468665c2c35758557f9
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6d:tcox7ATKj8+YmDXzKF0Yd
- TLSH T180053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application