General
- Target 2026-11-11_176bcd17f27a8c85d1a4b495eb893e8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 956KB
- Sample261113-vaxe2ax19l
- SHA256 7495cedd39431788294388f5dd30090c2f2fae1b3f93ecdef0d3896b29bc0738
- MD5 176bcd17f27a8c85d1a4b495eb893e8f
- SHA1 9fa8b9e873c5af42c53dccf9f2452937b47c2f8a
- SHA512 bb59c61bda8174212378912a6c9331bbec7ec6d4381d9019dc8bdd4388fc381ec92c324fbfc8b1e161d197dedc8afbae2bd7ee822568ee05abee780425d54220
- SSDEEP 24576:55FRZp1b1TOE5lObAfYLH8AcevDN0FImbwQuq3Wia7gDd:lRbqrAQgAT76sQuEd
- TLSH T1EF25E006F79904F9E4B7D13889728502E6B27C5A0370DBEF13A846572F376D09E7AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_176bcd17f27a8c85d1a4b495eb893e8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_176bcd17f27a8c85d1a4b495eb893e8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_176bcd17f27a8c85d1a4b495eb893e8f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 956KB
- SHA256 7495cedd39431788294388f5dd30090c2f2fae1b3f93ecdef0d3896b29bc0738
- MD5 176bcd17f27a8c85d1a4b495eb893e8f
- SHA1 9fa8b9e873c5af42c53dccf9f2452937b47c2f8a
- SHA512 bb59c61bda8174212378912a6c9331bbec7ec6d4381d9019dc8bdd4388fc381ec92c324fbfc8b1e161d197dedc8afbae2bd7ee822568ee05abee780425d54220
- SSDEEP 24576:55FRZp1b1TOE5lObAfYLH8AcevDN0FImbwQuq3Wia7gDd:lRbqrAQgAT76sQuEd
- TLSH T1EF25E006F79904F9E4B7D13889728502E6B27C5A0370DBEF13A846572F376D09E7AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1