General
- Target 2026-11-06_d43f79260d9785461a70b74623e23b58_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar
- Size 13.5MB
- Sample261107-18ssdsgd34
- SHA256 bfec798856c5035dfa6d749a2c4ece556113dfe8298044fa57eff6e8e6e7e557
- MD5 d43f79260d9785461a70b74623e23b58
- SHA1 b10ebd241416c51b9129cc087a353bef21581d42
- SHA512 af0292199f89344c1addeb083f226f1cf22aa6c687250c1a855e7cf84a64a9a361405d5489d529112081a8426c085367d611c449b625b71d328a1fbd0c5674a8
- SSDEEP 196608:ljq+xH2XzHbUOUV+0RLBV/kuQAGr+Eu1LXktdK0wK/MPUTxyETJURh:ljj8YOUV+0Jku/unuOdKVKEPV3
- TLSH T178E6F10BB25A01E8EF27A13885576A07C2767CC5133093EB269955613FEBBF076BE305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-11-06_d43f79260d9785461a70b74623e23b58_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_d43f79260d9785461a70b74623e23b58_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_d43f79260d9785461a70b74623e23b58_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar
- Size 13.5MB
- SHA256 bfec798856c5035dfa6d749a2c4ece556113dfe8298044fa57eff6e8e6e7e557
- MD5 d43f79260d9785461a70b74623e23b58
- SHA1 b10ebd241416c51b9129cc087a353bef21581d42
- SHA512 af0292199f89344c1addeb083f226f1cf22aa6c687250c1a855e7cf84a64a9a361405d5489d529112081a8426c085367d611c449b625b71d328a1fbd0c5674a8
- SSDEEP 196608:ljq+xH2XzHbUOUV+0RLBV/kuQAGr+Eu1LXktdK0wK/MPUTxyETJURh:ljj8YOUV+0Jku/unuOdKVKEPV3
- TLSH T178E6F10BB25A01E8EF27A13885576A07C2767CC5133093EB269955613FEBBF076BE305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables manipulated with Fody
- Custom signature
Detects executables packed with Themida