General
- Target 2026-07-27_a47980dc9a9c9912bbe96995bbcab6bd_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260727-l85dvszfmc
- SHA256 29f1a0de76e3b99efc006be6394a9f48559f09a7fce0b96b5ab53abc77398ac4
- MD5 a47980dc9a9c9912bbe96995bbcab6bd
- SHA1 0b610d42bee3993e87ce7e5bf2b4bf996c3c0797
- SHA512 c01d302914e11f9993066b74283c885529a53fe7332116ab764ea0eead746173d93088870e9b8bd2bf57751ba9b9e71664e8fd3c1ca7e799ed7805253bd15d8a
- SSDEEP 49152:ovmHGcnO2EvU/bMvo/SHEif5YL8NnjSOjNCWTPp8N7s8SJGkHO4T3i:oTvUko/Sz/j0I8NiI
- TLSH T1510618ADA6DE00C6C070A4F4CD065795E2F2F854833249CB15E81A1FAE7FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_a47980dc9a9c9912bbe96995bbcab6bd_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_a47980dc9a9c9912bbe96995bbcab6bd_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_a47980dc9a9c9912bbe96995bbcab6bd_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 29f1a0de76e3b99efc006be6394a9f48559f09a7fce0b96b5ab53abc77398ac4
- MD5 a47980dc9a9c9912bbe96995bbcab6bd
- SHA1 0b610d42bee3993e87ce7e5bf2b4bf996c3c0797
- SHA512 c01d302914e11f9993066b74283c885529a53fe7332116ab764ea0eead746173d93088870e9b8bd2bf57751ba9b9e71664e8fd3c1ca7e799ed7805253bd15d8a
- SSDEEP 49152:ovmHGcnO2EvU/bMvo/SHEif5YL8NnjSOjNCWTPp8N7s8SJGkHO4T3i:oTvUko/Sz/j0I8NiI
- TLSH T1510618ADA6DE00C6C070A4F4CD065795E2F2F854833249CB15E81A1FAE7FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.