General
- Target 2026-11-03_37252e09a1e4022369f4944cd7273554_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 930KB
- Sample261104-3teckafa22
- SHA256 b2e59bf60be32104ab644b2ec012b9f385f56e95a14ead44eb6a8b17075abb07
- MD5 37252e09a1e4022369f4944cd7273554
- SHA1 4b8abbe204ecf0ef8f4ea0d5c58e8c33e66ca8ba
- SHA512 eb6fbf98469887d69e5abd853abf80ab43a1185e791897f1048e6441d3f7304f1eea6fd93c141a382d14bfdeff67ea3c4a3346bb9ddf85306acd82f306a7e366
- SSDEEP 24576:ag5d7qEWRTBoDf5iaHDq1dUjWtsBClUorveo/:r1XWR1Q5iqD35BClUoTF
- TLSH T18B150165F3A40CF5E86BC27D85528606EBB2781A1771E78F17A4831A2F236E0DD3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-03_37252e09a1e4022369f4944cd7273554_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_37252e09a1e4022369f4944cd7273554_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 930KB
- SHA256 b2e59bf60be32104ab644b2ec012b9f385f56e95a14ead44eb6a8b17075abb07
- MD5 37252e09a1e4022369f4944cd7273554
- SHA1 4b8abbe204ecf0ef8f4ea0d5c58e8c33e66ca8ba
- SHA512 eb6fbf98469887d69e5abd853abf80ab43a1185e791897f1048e6441d3f7304f1eea6fd93c141a382d14bfdeff67ea3c4a3346bb9ddf85306acd82f306a7e366
- SSDEEP 24576:ag5d7qEWRTBoDf5iaHDq1dUjWtsBClUorveo/:r1XWR1Q5iqD35BClUoTF
- TLSH T18B150165F3A40CF5E86BC27D85528606EBB2781A1771E78F17A4831A2F236E0DD3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.