General
- Target 2026-11-07_219fe7bf987a3220902a93f3bf587bdb_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261107-tptr1szthw
- SHA256 1c09e8ebc3857246b5d1c5891d36992ad92dd88e0a5fa1c83f240f6b1720f78f
- MD5 219fe7bf987a3220902a93f3bf587bdb
- SHA1 07de125866221ed9fb59f214ed8dbe70707a89fe
- SHA512 64b181dbb1cfe31ca58f990fdeddfc197e829265ba1ef83b02d02f501e0644125eed949fbd8318dda4f8b3c542ab1e8fb60ecbe85c39d608510cea0e34b0e2e3
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86I:rcox7ATKj8+YmDXzKFiBI
- TLSH T152054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-07_219fe7bf987a3220902a93f3bf587bdb_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_219fe7bf987a3220902a93f3bf587bdb_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_219fe7bf987a3220902a93f3bf587bdb_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 1c09e8ebc3857246b5d1c5891d36992ad92dd88e0a5fa1c83f240f6b1720f78f
- MD5 219fe7bf987a3220902a93f3bf587bdb
- SHA1 07de125866221ed9fb59f214ed8dbe70707a89fe
- SHA512 64b181dbb1cfe31ca58f990fdeddfc197e829265ba1ef83b02d02f501e0644125eed949fbd8318dda4f8b3c542ab1e8fb60ecbe85c39d608510cea0e34b0e2e3
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86I:rcox7ATKj8+YmDXzKFiBI
- TLSH T152054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application