General
- Target 2026-07-14_67d25054f50dfb7396228c7f0dfe928a_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 992KB
- Sample260714-nbtxzady2v
- SHA256 9536f7e247c566afb2eb79681a045d475e6b9cbcf439ed537fb3dffb08a29d1a
- MD5 67d25054f50dfb7396228c7f0dfe928a
- SHA1 a557f2833ac91be29e45e8a4f8e2e88cf59d5dae
- SHA512 039df578a6ba72f19555d8bbc6f59b4ec3b64e5cc7efab171104d2ab882e5b08c46b8ac04b673c7d9b3a0d4d9103a06da7e498055be1cae6f21f3a3ed339fb42
- SSDEEP 24576:kKLGkmFmiu2Wh+zkiGiAgNe68OzQytCe:k7Q2WgztGGQY
- TLSH T17825E056A39501F8E5B78138C9960A43FBB2B4560320EBDB139CD6751F23AE16E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_67d25054f50dfb7396228c7f0dfe928a_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_67d25054f50dfb7396228c7f0dfe928a_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 992KB
- SHA256 9536f7e247c566afb2eb79681a045d475e6b9cbcf439ed537fb3dffb08a29d1a
- MD5 67d25054f50dfb7396228c7f0dfe928a
- SHA1 a557f2833ac91be29e45e8a4f8e2e88cf59d5dae
- SHA512 039df578a6ba72f19555d8bbc6f59b4ec3b64e5cc7efab171104d2ab882e5b08c46b8ac04b673c7d9b3a0d4d9103a06da7e498055be1cae6f21f3a3ed339fb42
- SSDEEP 24576:kKLGkmFmiu2Wh+zkiGiAgNe68OzQytCe:k7Q2WgztGGQY
- TLSH T17825E056A39501F8E5B78138C9960A43FBB2B4560320EBDB139CD6751F23AE16E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1