General
- Target 2026-11-01_e9b23f03ea0137a00e1974c6fc88ce5f_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261102-e8l4ysea97
- SHA256 f54d13f6718faafa81adf231eef83439b55f46c6a2df3b5806c28bfb0f694d9d
- MD5 e9b23f03ea0137a00e1974c6fc88ce5f
- SHA1 368c44691ca58b611b957455ed0982487c4b8269
- SHA512 6e12f64d79137ef4ae3dffdf655e87060a77e3db9cfb2a64f4d6d2edbad3d312e90df7b5051bd742c7feef108926bada8db584fdc13b95532df83be7a9171b15
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6g:tcox7ATKj8+YmDXzKF0Yg
- TLSH T1E6053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_e9b23f03ea0137a00e1974c6fc88ce5f_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_e9b23f03ea0137a00e1974c6fc88ce5f_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_e9b23f03ea0137a00e1974c6fc88ce5f_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 f54d13f6718faafa81adf231eef83439b55f46c6a2df3b5806c28bfb0f694d9d
- MD5 e9b23f03ea0137a00e1974c6fc88ce5f
- SHA1 368c44691ca58b611b957455ed0982487c4b8269
- SHA512 6e12f64d79137ef4ae3dffdf655e87060a77e3db9cfb2a64f4d6d2edbad3d312e90df7b5051bd742c7feef108926bada8db584fdc13b95532df83be7a9171b15
- SSDEEP 12288:L7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1uXVN6g:tcox7ATKj8+YmDXzKF0Yg
- TLSH T1E6053A167A49187DCDC7D475978B6923462834CB1E61BCFF83C9A2323E6A0B89F36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application