General
- Target 2026-07-11_510b2589a9777e80038a6d102654b0e2_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260711-qqbfaadt4t
- SHA256 cdfcb4c0ff98da883e265bc0205ae203ebbcd3d43428bc4ed445d1ba77c00397
- MD5 510b2589a9777e80038a6d102654b0e2
- SHA1 4bac21342835d531ddf0b67acbeaca353f08a2ce
- SHA512 2a9c8facd8616066a112918bb1cb0ee3ae1300c661768a3d2d9c4a303719bba2874782940b70b0a06e339397bb253b57bed3bc4174eb935478ee3ec41243b7e5
- SSDEEP 49152:Q7mZ5UxCNBjHYi3ScakCEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtOQnquMtuR:FO2sGJeDtmMQR
- TLSH T1F4167B07E7B940E5C0BBD13D8A579657FAB2785A877197CB43A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_510b2589a9777e80038a6d102654b0e2_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_510b2589a9777e80038a6d102654b0e2_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 cdfcb4c0ff98da883e265bc0205ae203ebbcd3d43428bc4ed445d1ba77c00397
- MD5 510b2589a9777e80038a6d102654b0e2
- SHA1 4bac21342835d531ddf0b67acbeaca353f08a2ce
- SHA512 2a9c8facd8616066a112918bb1cb0ee3ae1300c661768a3d2d9c4a303719bba2874782940b70b0a06e339397bb253b57bed3bc4174eb935478ee3ec41243b7e5
- SSDEEP 49152:Q7mZ5UxCNBjHYi3ScakCEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtOQnquMtuR:FO2sGJeDtmMQR
- TLSH T1F4167B07E7B940E5C0BBD13D8A579657FAB2785A877197CB43A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1