General
- Target 2026-07-23_a2dabc50ad34ee194442857410597492_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.4MB
- Sample260723-xcb8zscf72
- SHA256 9704ca3662af41d9878d75c44ae18b6c296ec53a6e410edeb8f001af2e61ecc1
- MD5 a2dabc50ad34ee194442857410597492
- SHA1 ea3c4cfce0f8ebb828a6b73dce2b70104480da60
- SHA512 4820e76b4d6bf28aea53a86b3846d73d33c977e8d26681537160b426da1604f77b845e2f1b5aa20b5424246ec1835749b99b8aff233e819080cdf029a4d94254
- SSDEEP 24576:4VrsHVV/ssH6M9+JbESZKWvfWiGGC5SYC4sqjnhMgeiCl7G0nehbGZpbD:4Vrs1p79+VtZKMkxDmg27RnWGj
- TLSH T18365AD2DE6A801AAE06A9179EC554306E7B37F15137086CB33A0756A1F776E0CF3EE11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_a2dabc50ad34ee194442857410597492_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_a2dabc50ad34ee194442857410597492_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.4MB
- SHA256 9704ca3662af41d9878d75c44ae18b6c296ec53a6e410edeb8f001af2e61ecc1
- MD5 a2dabc50ad34ee194442857410597492
- SHA1 ea3c4cfce0f8ebb828a6b73dce2b70104480da60
- SHA512 4820e76b4d6bf28aea53a86b3846d73d33c977e8d26681537160b426da1604f77b845e2f1b5aa20b5424246ec1835749b99b8aff233e819080cdf029a4d94254
- SSDEEP 24576:4VrsHVV/ssH6M9+JbESZKWvfWiGGC5SYC4sqjnhMgeiCl7G0nehbGZpbD:4Vrs1p79+VtZKMkxDmg27RnWGj
- TLSH T18365AD2DE6A801AAE06A9179EC554306E7B37F15137086CB33A0756A1F776E0CF3EE11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1