General
- Target 2026-05-08_90f6486aa240e9149c6d6649a1872c27_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample260508-vc2grsa18t
- SHA256 75218d325ac0b5c8a18e6da846322b526bc69c470f4d1fc227283dea0655ec5a
- MD5 90f6486aa240e9149c6d6649a1872c27
- SHA1 a7714817a3f9e2645cd6a37b648e9ae4883df19d
- SHA512 bc727c5b6df4f616a60c858ee1ff28da6f7e0dd6e7f23131d090d69dd5b84a17c290a080df72665e877ade4a20a09ec1550011b4a10973e0a0671810b685cae0
- SSDEEP 49152:UvHhjK3xEPK3Hkcm4L8A5ilofJJnB58MlSKl2HJpVWs216:UPVTKXkcmWfJixL
- TLSH T125D57D6D7AED00D6C175E0B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-08_90f6486aa240e9149c6d6649a1872c27_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-08_90f6486aa240e9149c6d6649a1872c27_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-08_90f6486aa240e9149c6d6649a1872c27_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 75218d325ac0b5c8a18e6da846322b526bc69c470f4d1fc227283dea0655ec5a
- MD5 90f6486aa240e9149c6d6649a1872c27
- SHA1 a7714817a3f9e2645cd6a37b648e9ae4883df19d
- SHA512 bc727c5b6df4f616a60c858ee1ff28da6f7e0dd6e7f23131d090d69dd5b84a17c290a080df72665e877ade4a20a09ec1550011b4a10973e0a0671810b685cae0
- SSDEEP 49152:UvHhjK3xEPK3Hkcm4L8A5ilofJJnB58MlSKl2HJpVWs216:UPVTKXkcmWfJixL
- TLSH T125D57D6D7AED00D6C175E0B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.