General
- Target 2026-11-03_7f178e5200eaa55a111f77c4d783ff22_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 830KB
- Sample261104-s8f5lasxdx
- SHA256 b219c3d0a40fe2dc91ea998d1c9ba529ff616d2627da409adfca74335ce07380
- MD5 7f178e5200eaa55a111f77c4d783ff22
- SHA1 3027a71043cc4bcf0c54305885308bbf1a24642c
- SHA512 1fb21cb4e47bfd61002c6bb2f2e852dae7970d97e938de4ece9600a457e118e40515d0c2c2521e13cfb6c94364cbeeb56b39f8b9d7250a40d8eed463ebabf929
- SSDEEP 12288:j7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u/VF6xC:lcox7ATKj8+YmDXzKF8gxC
- TLSH T14E053B157A49187DC9C6D475978B6A23492874CF0E61BCFF83C9A2323EAA0B4DF36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_7f178e5200eaa55a111f77c4d783ff22_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_7f178e5200eaa55a111f77c4d783ff22_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_7f178e5200eaa55a111f77c4d783ff22_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 830KB
- SHA256 b219c3d0a40fe2dc91ea998d1c9ba529ff616d2627da409adfca74335ce07380
- MD5 7f178e5200eaa55a111f77c4d783ff22
- SHA1 3027a71043cc4bcf0c54305885308bbf1a24642c
- SHA512 1fb21cb4e47bfd61002c6bb2f2e852dae7970d97e938de4ece9600a457e118e40515d0c2c2521e13cfb6c94364cbeeb56b39f8b9d7250a40d8eed463ebabf929
- SSDEEP 12288:j7tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u/VF6xC:lcox7ATKj8+YmDXzKF8gxC
- TLSH T14E053B157A49187DC9C6D475978B6A23492874CF0E61BCFF83C9A2323EAA0B4DF36714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application