General
- Target 2026-11-01_de316ab6c8860818070e98ee59e85fb6_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 830KB
- Sample261102-g2kcwsts2l
- SHA256 0749c46573d9088c4198ae620619c6f2ad6123ed76318ba46a8072fe55ea1fc7
- MD5 de316ab6c8860818070e98ee59e85fb6
- SHA1 3142ce8b0b9b51f2a3abb48b69cf8d625edc1478
- SHA512 4dfa759d169b850758e41cfff76b1cc35b8bcba1312cf46618780565a1ecaf44e8bd3c1f9823399d36166eaab4b932d88b60da73fa2f6c7a683f46746a7653b9
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86u:rcox7ATKj8+YmDXzKFiBu
- TLSH T18D054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_de316ab6c8860818070e98ee59e85fb6_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_de316ab6c8860818070e98ee59e85fb6_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_de316ab6c8860818070e98ee59e85fb6_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 830KB
- SHA256 0749c46573d9088c4198ae620619c6f2ad6123ed76318ba46a8072fe55ea1fc7
- MD5 de316ab6c8860818070e98ee59e85fb6
- SHA1 3142ce8b0b9b51f2a3abb48b69cf8d625edc1478
- SHA512 4dfa759d169b850758e41cfff76b1cc35b8bcba1312cf46618780565a1ecaf44e8bd3c1f9823399d36166eaab4b932d88b60da73fa2f6c7a683f46746a7653b9
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86u:rcox7ATKj8+YmDXzKFiBu
- TLSH T18D054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application