General
- Target 2026-07-30_a43924b0f0b40ec681e50a987f97192b_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.1MB
- Sample260730-vrk4bswxfx
- SHA256 7eb168b517c61280bd306c5aca2fc365c5803e064de3b1f35f03c3424182106e
- MD5 a43924b0f0b40ec681e50a987f97192b
- SHA1 dc491f16ff4d83931b2b3e3e71f984c2aa6ba5a0
- SHA512 6183170b33782400ec67b19cffc4b517437b134cdb2fe95b6c75f2bb761efa427231e250658d86b8362352eed1bbcd1b0c936485e03176b4e4b676cbf077ea2d
- SSDEEP 24576:v0/C6C+H79Us2PtOsyZpY6mctvE/BT76+1NCE:v0/LsI+6mGvKVO+n1
- TLSH T1DF45E112B7A101F9D0B7D179CA558A75FAB2BC490720A7CB03E486562F277A15F3F322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_a43924b0f0b40ec681e50a987f97192b_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a43924b0f0b40ec681e50a987f97192b_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.1MB
- SHA256 7eb168b517c61280bd306c5aca2fc365c5803e064de3b1f35f03c3424182106e
- MD5 a43924b0f0b40ec681e50a987f97192b
- SHA1 dc491f16ff4d83931b2b3e3e71f984c2aa6ba5a0
- SHA512 6183170b33782400ec67b19cffc4b517437b134cdb2fe95b6c75f2bb761efa427231e250658d86b8362352eed1bbcd1b0c936485e03176b4e4b676cbf077ea2d
- SSDEEP 24576:v0/C6C+H79Us2PtOsyZpY6mctvE/BT76+1NCE:v0/LsI+6mGvKVO+n1
- TLSH T1DF45E112B7A101F9D0B7D179CA558A75FAB2BC490720A7CB03E486562F277A15F3F322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1