General
- Target 2026-07-01_cae149e871acb0f9c4670da88a8c6e58_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 512KB
- Sample260701-jgtryabt41
- SHA256 b141ff0f444aacdba6d84dfcb63cc6605b9592040c33ca88cf5c4b14d864f4b7
- MD5 cae149e871acb0f9c4670da88a8c6e58
- SHA1 6a13578dffdea7914b1d069bbb1819729ab91d7b
- SHA512 55cad4569d034c18267da8464cbcbac7a3042c03c07c25e57c3d025198144bd26176dd753df04a36d08194e83dc31cb11072d07bb46acb8c81315540cf0c3dcb
- SSDEEP 6144:L4m/DUI3YDCrrOo4CRmDb8bqEAlZ8tryxGJIGNRdtDcgwjouIGaUM83P7mk:MwUIiAvLW8+ESpeIK/cDoUj
- TLSH T199B47D15AA6803BDD177C2B8C9634902E771789B0371AEDF039089B61F276D29E7FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_cae149e871acb0f9c4670da88a8c6e58_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_cae149e871acb0f9c4670da88a8c6e58_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_cae149e871acb0f9c4670da88a8c6e58_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 512KB
- SHA256 b141ff0f444aacdba6d84dfcb63cc6605b9592040c33ca88cf5c4b14d864f4b7
- MD5 cae149e871acb0f9c4670da88a8c6e58
- SHA1 6a13578dffdea7914b1d069bbb1819729ab91d7b
- SHA512 55cad4569d034c18267da8464cbcbac7a3042c03c07c25e57c3d025198144bd26176dd753df04a36d08194e83dc31cb11072d07bb46acb8c81315540cf0c3dcb
- SSDEEP 6144:L4m/DUI3YDCrrOo4CRmDb8bqEAlZ8tryxGJIGNRdtDcgwjouIGaUM83P7mk:MwUIiAvLW8+ESpeIK/cDoUj
- TLSH T199B47D15AA6803BDD177C2B8C9634902E771789B0371AEDF039089B61F276D29E7FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.