General
- Target 2026-07-06_14adbeb4521d8e8e38800b4fd0b7c774_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260707-fxvsdsav5v
- SHA256 4d0bc4fae472a8d5bcafd2313131586ad37ebbef70a5e031c0192368d2b59dad
- MD5 14adbeb4521d8e8e38800b4fd0b7c774
- SHA1 45ac53f6f7f90c395ae9c8021f95bd6328afaea5
- SHA512 f63baccde95c03f453054de5a4e3feec2c74edceae74c6e26ac5293d05c944d15daa8d7fcd4d42cabf7223db3f9ef8b6f1cbca4fff9d8237521cb99db1680766
- SSDEEP 49152:bjcHonJkXCXjMHaIbnCeGusRN/BEmjfzScB1QMTNVvn30TofuXTJLO83y:HXLfPrJoT0
- TLSH T19D167B07E7B941E5C0BBD13D8A569657FAB2784A877197CB43A0871A0F237E09E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_14adbeb4521d8e8e38800b4fd0b7c774_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_14adbeb4521d8e8e38800b4fd0b7c774_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 4d0bc4fae472a8d5bcafd2313131586ad37ebbef70a5e031c0192368d2b59dad
- MD5 14adbeb4521d8e8e38800b4fd0b7c774
- SHA1 45ac53f6f7f90c395ae9c8021f95bd6328afaea5
- SHA512 f63baccde95c03f453054de5a4e3feec2c74edceae74c6e26ac5293d05c944d15daa8d7fcd4d42cabf7223db3f9ef8b6f1cbca4fff9d8237521cb99db1680766
- SSDEEP 49152:bjcHonJkXCXjMHaIbnCeGusRN/BEmjfzScB1QMTNVvn30TofuXTJLO83y:HXLfPrJoT0
- TLSH T19D167B07E7B941E5C0BBD13D8A569657FAB2784A877197CB43A0871A0F237E09E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory