General
- Target 2026-05-07_4de5211ab24d944da9625bdea60f6009_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample260507-l1vvfsey4p
- SHA256 eb706bd11a2af9b470b65a063391ea35621d05462d4f274f373f3e5845c8e13b
- MD5 4de5211ab24d944da9625bdea60f6009
- SHA1 fc53fe146165275a45537ad1ccfd119b43a3ce56
- SHA512 2262639e9de1d20ab9c6c5c3bdb6389a2d41c98641b5d7627001ada9f4207a79c912b7843a94424a8b8b5e68cfd5ec6805766aa5aef8baf8e2bd37e2b05067a1
- SSDEEP 49152:S5cljK3xEPK3Hkcm4L8A5ilUfJJnB58MlSKl2HJpmQ:S25TKXkcmmfJiiQ
- TLSH T119D57D6D7AED00D6C135E1B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-07_4de5211ab24d944da9625bdea60f6009_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-07_4de5211ab24d944da9625bdea60f6009_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_4de5211ab24d944da9625bdea60f6009_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 eb706bd11a2af9b470b65a063391ea35621d05462d4f274f373f3e5845c8e13b
- MD5 4de5211ab24d944da9625bdea60f6009
- SHA1 fc53fe146165275a45537ad1ccfd119b43a3ce56
- SHA512 2262639e9de1d20ab9c6c5c3bdb6389a2d41c98641b5d7627001ada9f4207a79c912b7843a94424a8b8b5e68cfd5ec6805766aa5aef8baf8e2bd37e2b05067a1
- SSDEEP 49152:S5cljK3xEPK3Hkcm4L8A5ilUfJJnB58MlSKl2HJpmQ:S25TKXkcmmfJiiQ
- TLSH T119D57D6D7AED00D6C135E1B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.