General
- Target 2026-07-17_3860a50451f1ed3ac6b957b735e3c507_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260718-evhjlsbs7s
- SHA256 f3c594a0e7c11dbcdc4d125365040b99edf586a53d96150e40881084863a11d9
- MD5 3860a50451f1ed3ac6b957b735e3c507
- SHA1 82bb96912c32c5fe3d418f5dcabddc3e3acefa05
- SHA512 c2f3ed669c27bc5dab4151f01fcd4cea3aa733dc9730d59edab6835487469f171957769cdb071e65639a9ed3828ab6a44baa728810372beb5fc77abd68467355
- SSDEEP 49152:D+0XJ4x87A/kmyQz3ZwMYDOf2UmJ8CYKMrSvBuP1cEQWk9Z3TeB4B+kn3Hnx:D+029joYb2+k
- TLSH T1EC167B47E6B901E5C0BBD13D8A579657FAB2784A877197CB03A0875A4F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_3860a50451f1ed3ac6b957b735e3c507_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_3860a50451f1ed3ac6b957b735e3c507_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 f3c594a0e7c11dbcdc4d125365040b99edf586a53d96150e40881084863a11d9
- MD5 3860a50451f1ed3ac6b957b735e3c507
- SHA1 82bb96912c32c5fe3d418f5dcabddc3e3acefa05
- SHA512 c2f3ed669c27bc5dab4151f01fcd4cea3aa733dc9730d59edab6835487469f171957769cdb071e65639a9ed3828ab6a44baa728810372beb5fc77abd68467355
- SSDEEP 49152:D+0XJ4x87A/kmyQz3ZwMYDOf2UmJ8CYKMrSvBuP1cEQWk9Z3TeB4B+kn3Hnx:D+029joYb2+k
- TLSH T1EC167B47E6B901E5C0BBD13D8A579657FAB2784A877197CB03A0875A4F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory