General
- Target 2026-07-23_edb65f73c178edcefa5f78d8ca91f770_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.7MB
- Sample260723-fa3jqagc74
- SHA256 e6cf5ac508830fb86b9cc4a275189b6de024311ddb2694295ce8001762ed1d03
- MD5 edb65f73c178edcefa5f78d8ca91f770
- SHA1 0287b3470ceeb774a5e68ec25e43baf9aa70154c
- SHA512 609927d082e6f68d94e7a1ed8ac10b5c8d8f0472f766078843973ac5912ff988fbad16292b167b037b74c14ccbf86ad301f990d6de14f53c01fcbb0374e1e550
- SSDEEP 49152:wWGzNuUUmT7S7WwLHKDmRCzrfriixw1bLs8CUeT+uXEkjNEEBHLg/LNiXicJFFRI:w1W7W/UBa+uUkjDBHLg/7wRGpj3
- TLSH T1EE06AF06A3F805ACE0FBD278DD569603D77BB8090371969F039099A62F673A0DE7D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_edb65f73c178edcefa5f78d8ca91f770_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_edb65f73c178edcefa5f78d8ca91f770_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_edb65f73c178edcefa5f78d8ca91f770_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.7MB
- SHA256 e6cf5ac508830fb86b9cc4a275189b6de024311ddb2694295ce8001762ed1d03
- MD5 edb65f73c178edcefa5f78d8ca91f770
- SHA1 0287b3470ceeb774a5e68ec25e43baf9aa70154c
- SHA512 609927d082e6f68d94e7a1ed8ac10b5c8d8f0472f766078843973ac5912ff988fbad16292b167b037b74c14ccbf86ad301f990d6de14f53c01fcbb0374e1e550
- SSDEEP 49152:wWGzNuUUmT7S7WwLHKDmRCzrfriixw1bLs8CUeT+uXEkjNEEBHLg/LNiXicJFFRI:w1W7W/UBa+uUkjDBHLg/7wRGpj3
- TLSH T1EE06AF06A3F805ACE0FBD278DD569603D77BB8090371969F039099A62F673A0DE7D721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1