General
- Target 2026-10-28_1b911a75e984cec893b732b0829d085a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261030-k83plact6l
- SHA256 d0f191618aad2f156126c3da9e93ed95f3e71dc50f7ead9d3fa2b4ac14265406
- MD5 1b911a75e984cec893b732b0829d085a
- SHA1 0df998da6e1ac6fc3649bf05f9f35fb1f92613c0
- SHA512 76a5dd99574a33ea5c6f4ad080192009aa78aa0e5b671f3cc4e3c8af5839d4ede4b10747fbf2b493b8bd2c54f2aee336c22058b721307a891ef1f970249c42c3
- SSDEEP 12288:j7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u/VF6x0:lcox7ATKj8+YmDXzKF8gx0
- TLSH T1D1053B157A49187DC9C6D475978B6A23492874CF0E61BCFF83C9A2323EAA0B4DF36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_1b911a75e984cec893b732b0829d085a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_1b911a75e984cec893b732b0829d085a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_1b911a75e984cec893b732b0829d085a_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 d0f191618aad2f156126c3da9e93ed95f3e71dc50f7ead9d3fa2b4ac14265406
- MD5 1b911a75e984cec893b732b0829d085a
- SHA1 0df998da6e1ac6fc3649bf05f9f35fb1f92613c0
- SHA512 76a5dd99574a33ea5c6f4ad080192009aa78aa0e5b671f3cc4e3c8af5839d4ede4b10747fbf2b493b8bd2c54f2aee336c22058b721307a891ef1f970249c42c3
- SSDEEP 12288:j7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u/VF6x0:lcox7ATKj8+YmDXzKF8gx0
- TLSH T1D1053B157A49187DC9C6D475978B6A23492874CF0E61BCFF83C9A2323EAA0B4DF36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application