General
- Target 2026-07-20_e82270d7b9217ebecf0f8ab52fcb4ca7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260720-va21hsat2y
- SHA256 fd9f20c3706a1833d183cf16989e8546a66a99cb0368be1d2226cebb46e9971e
- MD5 e82270d7b9217ebecf0f8ab52fcb4ca7
- SHA1 496f02a4b09615d1ba0ba7a6221c54c25c146d99
- SHA512 ea7b1de113ba0217d882d6aca185c8a3f386b85f7603e8dbdf6bdd0c1da684090185e14ea9d3fc3c45bef3c0056c8ad85258923f11a5cce1972830d028e5f414
- SSDEEP 49152:I7mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtS6KFdi2Ga9x3K:EO2sGJeDDHFdi4VEk0V
- TLSH T115167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB47A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e82270d7b9217ebecf0f8ab52fcb4ca7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e82270d7b9217ebecf0f8ab52fcb4ca7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 fd9f20c3706a1833d183cf16989e8546a66a99cb0368be1d2226cebb46e9971e
- MD5 e82270d7b9217ebecf0f8ab52fcb4ca7
- SHA1 496f02a4b09615d1ba0ba7a6221c54c25c146d99
- SHA512 ea7b1de113ba0217d882d6aca185c8a3f386b85f7603e8dbdf6bdd0c1da684090185e14ea9d3fc3c45bef3c0056c8ad85258923f11a5cce1972830d028e5f414
- SSDEEP 49152:I7mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtS6KFdi2Ga9x3K:EO2sGJeDDHFdi4VEk0V
- TLSH T115167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB47A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory