General
- Target 2026-10-28_00ab55f0d0ae6881c35db041bb8063cc_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 832KB
- Sample261030-nt4j5aed35
- SHA256 4917dafb0603e35000a7851c193069d90f14214fe654f34f3f0f58cb6610a042
- MD5 00ab55f0d0ae6881c35db041bb8063cc
- SHA1 581bab4eebfec74cef1520517daff5a07299e22c
- SHA512 ac80ec7c7211f1a2918da9cd16d1fd00096401beb96b1292dfbd4ee4fe264ab0c6c32e3184cf6cc65fca04146735bd1d6fcfad3d5f1a5ec38ef299723df2dd39
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6X:tcox7ATKj8+YmDXzKF0YX
- TLSH T138053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_00ab55f0d0ae6881c35db041bb8063cc_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_00ab55f0d0ae6881c35db041bb8063cc_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_00ab55f0d0ae6881c35db041bb8063cc_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 832KB
- SHA256 4917dafb0603e35000a7851c193069d90f14214fe654f34f3f0f58cb6610a042
- MD5 00ab55f0d0ae6881c35db041bb8063cc
- SHA1 581bab4eebfec74cef1520517daff5a07299e22c
- SHA512 ac80ec7c7211f1a2918da9cd16d1fd00096401beb96b1292dfbd4ee4fe264ab0c6c32e3184cf6cc65fca04146735bd1d6fcfad3d5f1a5ec38ef299723df2dd39
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6X:tcox7ATKj8+YmDXzKF0YX
- TLSH T138053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application