General
- Target 2026-07-17_72cd45f7c2d23af718a9144f98c7f5ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260718-dxcwgaex2r
- SHA256 799a42db1d60e5893841f05abbd7de930de825a7d3aa39777e67683fe481d5e0
- MD5 72cd45f7c2d23af718a9144f98c7f5ee
- SHA1 37bf67cbf6b17560da2ee5b19647a428652a52a9
- SHA512 50f18f9b50f1c377bc510cfc9aaa46c258f32133cd4bbef788f89f06cb60774d7e60dffdca77465ec89d16bb11944bddb568488e8113ab8253bc2333b310d789
- SSDEEP 49152:V7mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtpCks7R9L58Uq:VO2sGJeDSC17DVqFJU
- TLSH T114167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB47A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_72cd45f7c2d23af718a9144f98c7f5ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_72cd45f7c2d23af718a9144f98c7f5ee_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 799a42db1d60e5893841f05abbd7de930de825a7d3aa39777e67683fe481d5e0
- MD5 72cd45f7c2d23af718a9144f98c7f5ee
- SHA1 37bf67cbf6b17560da2ee5b19647a428652a52a9
- SHA512 50f18f9b50f1c377bc510cfc9aaa46c258f32133cd4bbef788f89f06cb60774d7e60dffdca77465ec89d16bb11944bddb568488e8113ab8253bc2333b310d789
- SSDEEP 49152:V7mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtpCks7R9L58Uq:VO2sGJeDSC17DVqFJU
- TLSH T114167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB47A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory