General
- Target 2026-07-07_562d59ed35ff794b6a97d54fabd62446_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260707-wvtejsbw8s
- SHA256 dfb4b7314303561a4eba18222584b522219c19f772eb92a5dd6571875e0ede73
- MD5 562d59ed35ff794b6a97d54fabd62446
- SHA1 8380dcf8a996749e352d3fb2ca5dc65fb8f00786
- SHA512 ba164028b6708db2fe2b4251151d6456c868a382520cfc57864fbe978a967124587fd6c2a33e6fd49f80c49a1fe2f05f3c9a9e0385a388c584408d6387bc91bd
- SSDEEP 49152:evmHGcnO2EvU/bMvo/SHEif5YL8NnjSajNCWTPp8N7s8SJGsz:eTvUko/Sz/j0I8Nib
- TLSH T15F0608ADA6DE00C6C070A4F4CD165795E2F2F854833249CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_562d59ed35ff794b6a97d54fabd62446_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_562d59ed35ff794b6a97d54fabd62446_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_562d59ed35ff794b6a97d54fabd62446_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 dfb4b7314303561a4eba18222584b522219c19f772eb92a5dd6571875e0ede73
- MD5 562d59ed35ff794b6a97d54fabd62446
- SHA1 8380dcf8a996749e352d3fb2ca5dc65fb8f00786
- SHA512 ba164028b6708db2fe2b4251151d6456c868a382520cfc57864fbe978a967124587fd6c2a33e6fd49f80c49a1fe2f05f3c9a9e0385a388c584408d6387bc91bd
- SSDEEP 49152:evmHGcnO2EvU/bMvo/SHEif5YL8NnjSajNCWTPp8N7s8SJGsz:eTvUko/Sz/j0I8Nib
- TLSH T15F0608ADA6DE00C6C070A4F4CD165795E2F2F854833249CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.