General
- Target 2026-07-10_04d0228347950a82924f5f3072ef0785_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260710-n8cpysaz4j
- SHA256 3f2295c5ceb16b3dd127af7f937d21f170b9d47b84181bef805183baf3c82ed8
- MD5 04d0228347950a82924f5f3072ef0785
- SHA1 14b312f37c4704924789ab5b1b456356704d5d46
- SHA512 66f744adfa56355123b63b56f42591625b9f658b0ce9fa65c156c47071c678820f2b54b3bb5dbfb0232bd6e01f66c369bb805bc6eeaec3ef9643899bf61c874e
- SSDEEP 49152:fvmHGcnO2EvU/bMvo/SHEif5YL8NnjSpjNCWTPp8N7s8SJGR5:fTvUko/SzQj0I8NiQ
- TLSH T1E70608ADA6DE00C6C070A4F4CD064795E2F2F865833149CB15E81A1FAE7FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_04d0228347950a82924f5f3072ef0785_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_04d0228347950a82924f5f3072ef0785_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_04d0228347950a82924f5f3072ef0785_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 3f2295c5ceb16b3dd127af7f937d21f170b9d47b84181bef805183baf3c82ed8
- MD5 04d0228347950a82924f5f3072ef0785
- SHA1 14b312f37c4704924789ab5b1b456356704d5d46
- SHA512 66f744adfa56355123b63b56f42591625b9f658b0ce9fa65c156c47071c678820f2b54b3bb5dbfb0232bd6e01f66c369bb805bc6eeaec3ef9643899bf61c874e
- SSDEEP 49152:fvmHGcnO2EvU/bMvo/SHEif5YL8NnjSpjNCWTPp8N7s8SJGR5:fTvUko/SzQj0I8NiQ
- TLSH T1E70608ADA6DE00C6C070A4F4CD064795E2F2F865833149CB15E81A1FAE7FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.