General
- Target 2026-07-14_7cc48af03df43e7294ebfe6a2293fd1d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.5MB
- Sample260714-1wt5paev5q
- SHA256 8242c9babbe42f2bf13efd006643a5698e89d8c82d3c6949b02c399574b3b091
- MD5 7cc48af03df43e7294ebfe6a2293fd1d
- SHA1 8403ca07536e53bdc2cdd5ca7f5e7ec4d02ff9a3
- SHA512 2e4473a896c07d5250abef0d88a4c97c017cc5fff537bbcc0fa317be14f3c81efa5a79ba764cf10dd7203d9d6da8af3083734eb434c54eb900ca3928a8aca558
- SSDEEP 24576:hYdTQes6DiKLrkV8fJ4yL/tNCJPXUQrPa:udT7rG8fJ4klKXny
- TLSH T145659D4B73AC85EAC45DA03D480B8159FBB2F8125B6297DB6361431E6F7B3D82D39390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_7cc48af03df43e7294ebfe6a2293fd1d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_7cc48af03df43e7294ebfe6a2293fd1d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.5MB
- SHA256 8242c9babbe42f2bf13efd006643a5698e89d8c82d3c6949b02c399574b3b091
- MD5 7cc48af03df43e7294ebfe6a2293fd1d
- SHA1 8403ca07536e53bdc2cdd5ca7f5e7ec4d02ff9a3
- SHA512 2e4473a896c07d5250abef0d88a4c97c017cc5fff537bbcc0fa317be14f3c81efa5a79ba764cf10dd7203d9d6da8af3083734eb434c54eb900ca3928a8aca558
- SSDEEP 24576:hYdTQes6DiKLrkV8fJ4yL/tNCJPXUQrPa:udT7rG8fJ4klKXny
- TLSH T145659D4B73AC85EAC45DA03D480B8159FBB2F8125B6297DB6361431E6F7B3D82D39390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1