General
- Target 2026-07-08_a63ef80d3e59358a3fdd777bcdf98853_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.6MB
- Sample260708-kcb7rsds6w
- SHA256 9229ffab0f912de9a7b44d00029ff40d2f394dc5794c6c702e7680aba540f7f8
- MD5 a63ef80d3e59358a3fdd777bcdf98853
- SHA1 df3300514ad9d9fde1ecb62498a05c8e23e1e440
- SHA512 144a6bcd9267a208ea77a61e670a2803ffe3f3fb77f5d6bc2e4ad92310bbe913fd0716afdaeae70503969b4b1b168dedb7255e15ff58c4f600568345eebb7c94
- SSDEEP 98304:fI+83eayNY2LOPVhyV6ZlQyw23b/GIyz9dR+gjW1Ow09bh+44:V83es2LO3yV6wyP7+z9dhGOpdY
- TLSH T11B96AE5372EA02ECE0BAD178CA168923EB7278450331BADF069055796F37BE15E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_a63ef80d3e59358a3fdd777bcdf98853_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_a63ef80d3e59358a3fdd777bcdf98853_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.6MB
- SHA256 9229ffab0f912de9a7b44d00029ff40d2f394dc5794c6c702e7680aba540f7f8
- MD5 a63ef80d3e59358a3fdd777bcdf98853
- SHA1 df3300514ad9d9fde1ecb62498a05c8e23e1e440
- SHA512 144a6bcd9267a208ea77a61e670a2803ffe3f3fb77f5d6bc2e4ad92310bbe913fd0716afdaeae70503969b4b1b168dedb7255e15ff58c4f600568345eebb7c94
- SSDEEP 98304:fI+83eayNY2LOPVhyV6ZlQyw23b/GIyz9dR+gjW1Ow09bh+44:V83es2LO3yV6wyP7+z9dhGOpdY
- TLSH T11B96AE5372EA02ECE0BAD178CA168923EB7278450331BADF069055796F37BE15E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1