General
- Target 2026-07-27_9498703540e7c7e88eb82953fe55db3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260727-qazsyasgrd
- SHA256 8442a9211b82acbd70e3c7fe652f33d6699340e3d8ad3e4150426926c25ba7e8
- MD5 9498703540e7c7e88eb82953fe55db3f
- SHA1 017a3f3d4273615cc98a8724a87d5ea8d83c40a9
- SHA512 dbf59d698a2b8efed21abd68259b5ad12554e29bd6afe3c666d1ef7a1cdb68c3ca5eb041987fcd29687d6a7f2d3ae9f213a781ce63343613a97a2245f7e6d625
- SSDEEP 49152:i0V8tmfJCiulRM6Cm33aC0npmZNkj8A5cfi6jQCw2OzKTG55ge5Dv66mG:/CJxAUdQDv6V
- TLSH T103167C07E7B940E8C4BBD13D8A579657FAB27849877197CB07A0861A4F237E09E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_9498703540e7c7e88eb82953fe55db3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_9498703540e7c7e88eb82953fe55db3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 8442a9211b82acbd70e3c7fe652f33d6699340e3d8ad3e4150426926c25ba7e8
- MD5 9498703540e7c7e88eb82953fe55db3f
- SHA1 017a3f3d4273615cc98a8724a87d5ea8d83c40a9
- SHA512 dbf59d698a2b8efed21abd68259b5ad12554e29bd6afe3c666d1ef7a1cdb68c3ca5eb041987fcd29687d6a7f2d3ae9f213a781ce63343613a97a2245f7e6d625
- SSDEEP 49152:i0V8tmfJCiulRM6Cm33aC0npmZNkj8A5cfi6jQCw2OzKTG55ge5Dv66mG:/CJxAUdQDv6V
- TLSH T103167C07E7B940E8C4BBD13D8A579657FAB27849877197CB07A0861A4F237E09E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1