General
- Target 2026-11-10_fa345ef1aad43a1880c1e217ec202d89_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- Sample261110-e3m43atw4n
- SHA256 1d1865af71b78b6ebb9d0a1edace2aaa38ef6cb4c011b4367a4dde8fecf9d2e1
- MD5 fa345ef1aad43a1880c1e217ec202d89
- SHA1 3abfa3eb50040cbde59e0e1552e2ff3ea9bea188
- SHA512 e1a31f743d5e7b778ae1e1ce5fb59bb69e24cfbb1cb3348f653154b887a44beedc3d5ebc58883429e7d62b68dadee8bf2f9079c740f8de7b95c92a683895fd0f
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86b:rcox7ATKj8+YmDXzKFiBb
- TLSH T171054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-10_fa345ef1aad43a1880c1e217ec202d89_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_fa345ef1aad43a1880c1e217ec202d89_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_fa345ef1aad43a1880c1e217ec202d89_cobalt-strike_icedid_luca-stealer_mespinoza_njrat_ryuk_satacom_stealc_vidar
- Size 831KB
- SHA256 1d1865af71b78b6ebb9d0a1edace2aaa38ef6cb4c011b4367a4dde8fecf9d2e1
- MD5 fa345ef1aad43a1880c1e217ec202d89
- SHA1 3abfa3eb50040cbde59e0e1552e2ff3ea9bea188
- SHA512 e1a31f743d5e7b778ae1e1ce5fb59bb69e24cfbb1cb3348f653154b887a44beedc3d5ebc58883429e7d62b68dadee8bf2f9079c740f8de7b95c92a683895fd0f
- SSDEEP 12288:97tcNWRdeUTXAWIZHvKFHB63NuOlbYmg8GLYmDX0/gKxVk5k0O1u5V86b:rcox7ATKj8+YmDXzKFiBb
- TLSH T171054B157A4908BDD9CAD479978B6923452834CF0E71BCFF83C5A2323EAA0B59F36345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application