General
- Target 2026-07-23_33ead619e9edcaaaa67ca076c5402d56_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260723-sqffca1hpe
- SHA256 3b2e0450427a372d0c1d7ee729084085f180f942a5cae2c85853fc32aae1b22d
- MD5 33ead619e9edcaaaa67ca076c5402d56
- SHA1 154b416e5a06284935540f0456d131d4e9931bbd
- SHA512 6812da0b414b29d039b7f15d8d15475b38c6b7842a65bc070fbdf44dad165e2710d7e7ce0f278ec9f06cd4b373fd5259d92923abd5e4a7f0b79fe99cc2e01f74
- SSDEEP 49152:97mZ5UxCNBjHYi3ScakzEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtGLNiXicJFFRGN:5O2sGJeDJ7wRGpj3
- TLSH T18F167B07A7B940F5C0BBD13D8A579657FAB2784A877197CB43A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_33ead619e9edcaaaa67ca076c5402d56_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_33ead619e9edcaaaa67ca076c5402d56_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 3b2e0450427a372d0c1d7ee729084085f180f942a5cae2c85853fc32aae1b22d
- MD5 33ead619e9edcaaaa67ca076c5402d56
- SHA1 154b416e5a06284935540f0456d131d4e9931bbd
- SHA512 6812da0b414b29d039b7f15d8d15475b38c6b7842a65bc070fbdf44dad165e2710d7e7ce0f278ec9f06cd4b373fd5259d92923abd5e4a7f0b79fe99cc2e01f74
- SSDEEP 49152:97mZ5UxCNBjHYi3ScakzEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtGLNiXicJFFRGN:5O2sGJeDJ7wRGpj3
- TLSH T18F167B07A7B940F5C0BBD13D8A579657FAB2784A877197CB43A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1