General
- Target 2026-07-03_dc1a14cb4890f5767d79dfb2a599bc80_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260703-q39tlsas71
- SHA256 eb700a911abcb54f026fef0a22cfee9ecb91a813320034448f22c4b7e2c4c978
- MD5 dc1a14cb4890f5767d79dfb2a599bc80
- SHA1 3b4c8d7d4b6014caddc1d27e4590a9b8e1b543fe
- SHA512 0e9fe49e5e07e374ad99a0dc83cc2efb6a08d0861a75a459c91df0d2eff7bd7b6f221e5d93b9a2f6d1f7e3d42dd8d4c9b70db6f16cea57f8e0d12db5ed384af4
- SSDEEP 49152:bvmHGcnO2EvU/bMvo/SHEif5YL8NnjSFjNCWTPp8N7s8SJGlu:bTvUko/SzUj0I8NiYu
- TLSH T14A0608ADA6DE00C6C070A4F8CD064795E2F2F865833149CB15E81A1FAE7FEED4E39654
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_dc1a14cb4890f5767d79dfb2a599bc80_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_dc1a14cb4890f5767d79dfb2a599bc80_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_dc1a14cb4890f5767d79dfb2a599bc80_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 eb700a911abcb54f026fef0a22cfee9ecb91a813320034448f22c4b7e2c4c978
- MD5 dc1a14cb4890f5767d79dfb2a599bc80
- SHA1 3b4c8d7d4b6014caddc1d27e4590a9b8e1b543fe
- SHA512 0e9fe49e5e07e374ad99a0dc83cc2efb6a08d0861a75a459c91df0d2eff7bd7b6f221e5d93b9a2f6d1f7e3d42dd8d4c9b70db6f16cea57f8e0d12db5ed384af4
- SSDEEP 49152:bvmHGcnO2EvU/bMvo/SHEif5YL8NnjSFjNCWTPp8N7s8SJGlu:bTvUko/SzUj0I8NiYu
- TLSH T14A0608ADA6DE00C6C070A4F8CD064795E2F2F865833149CB15E81A1FAE7FEED4E39654
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.