General
- Target 2026-07-13_1b85008b811183caa93e0f3dae429e14_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.7MB
- Sample260713-e43adady81
- SHA256 c9bf2ab52e644196cbda9f348aec42e95a957dbddd127e166864b40406608791
- MD5 1b85008b811183caa93e0f3dae429e14
- SHA1 ce8386d3b00dfb8292c6bedac2ce1f041f6e383f
- SHA512 6056ac29da72b97dcfed92f6d431165b2e6b4f0e3a2f2246be40aa83d74b98de0508375a7a42fcbbc5f07a2bd0d0c79e0144ecafba75b2109899d90e5aa5b50a
- SSDEEP 24576:KklYllYkiDaIKB9hh97tkrRNyBo4kx929bL3Hnx:Kke4Vaxrx7tkSB+kn3Hnx
- TLSH T13485F12567D502F4E47B913889864263F6B2F8151774FFDF07A88A621F23AE14B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_1b85008b811183caa93e0f3dae429e14_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_1b85008b811183caa93e0f3dae429e14_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.7MB
- SHA256 c9bf2ab52e644196cbda9f348aec42e95a957dbddd127e166864b40406608791
- MD5 1b85008b811183caa93e0f3dae429e14
- SHA1 ce8386d3b00dfb8292c6bedac2ce1f041f6e383f
- SHA512 6056ac29da72b97dcfed92f6d431165b2e6b4f0e3a2f2246be40aa83d74b98de0508375a7a42fcbbc5f07a2bd0d0c79e0144ecafba75b2109899d90e5aa5b50a
- SSDEEP 24576:KklYllYkiDaIKB9hh97tkrRNyBo4kx929bL3Hnx:Kke4Vaxrx7tkSB+kn3Hnx
- TLSH T13485F12567D502F4E47B913889864263F6B2F8151774FFDF07A88A621F23AE14B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory