General
- Target 2026-11-02_ce7a244fb83e22bae9a1815d6f597e5a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.4MB
- Sample261102-1853qaxta1
- SHA256 5dc8f4a94e11e4c25c845ee1775d658ca626e86b4b49eed64f3c98e1341158e6
- MD5 ce7a244fb83e22bae9a1815d6f597e5a
- SHA1 b934049daca9646f8757f72916b66d298d956650
- SHA512 0e8a5a65bd17e3e16a1fa2e64abcbbb61a03b602d89b311a1200cf446cde465ed61d8623abc87e016d7c26e4c21103a40c1b81be1121d86b546542cde3cc9f32
- SSDEEP 196608:JzEkDd8M5SbpYJu0xc/1p4GOlH2pGtA3TX7aQMx3GdZR1QMrPEIWAVkTqvKJ:ikd8M5rJur/H4GOZCCA3TXWQMxWfUMzk
- TLSH T194B6331DEEB405F8E07BF1B85CC64063FBBA38460622974F07E996A61F172D09D79B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_ce7a244fb83e22bae9a1815d6f597e5a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_ce7a244fb83e22bae9a1815d6f597e5a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_ce7a244fb83e22bae9a1815d6f597e5a_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 10.4MB
- SHA256 5dc8f4a94e11e4c25c845ee1775d658ca626e86b4b49eed64f3c98e1341158e6
- MD5 ce7a244fb83e22bae9a1815d6f597e5a
- SHA1 b934049daca9646f8757f72916b66d298d956650
- SHA512 0e8a5a65bd17e3e16a1fa2e64abcbbb61a03b602d89b311a1200cf446cde465ed61d8623abc87e016d7c26e4c21103a40c1b81be1121d86b546542cde3cc9f32
- SSDEEP 196608:JzEkDd8M5SbpYJu0xc/1p4GOlH2pGtA3TX7aQMx3GdZR1QMrPEIWAVkTqvKJ:ikd8M5rJur/H4GOZCCA3TXWQMxWfUMzk
- TLSH T194B6331DEEB405F8E07BF1B85CC64063FBBA38460622974F07E996A61F172D09D79B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE