General
- Target 2026-07-30_c1d939d225a8c620275e02aacc990c4b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.8MB
- Sample260731-aqm63stscy
- SHA256 5bc8bf9c6010e5796ad1764a97d5a74a32803e17217e1e040eeda37167f4a6d0
- MD5 c1d939d225a8c620275e02aacc990c4b
- SHA1 980a13e48eec8e4146aa38e860363fac778fa7a8
- SHA512 8517db3d58fc2c043341a308a7d2b129e24ffb226d5431a376f801259f697e5f08f7e032712b60c223752885c49acdd615092e01fbdf3f93ca7a8f6df194fae4
- SSDEEP 12288:wTagjC7QaIjcV7VQeOgZ5btd5BlLGksLmONw/CX7YNmysags3R3DGwv5NjOytLs5:Caazc7VLq9Xozsr8zbhN6GwXOGIh4
- TLSH T16B95F156F7A400F9E267D278C9525A02DB727C8A076067CF23A41A975F33AE09F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_c1d939d225a8c620275e02aacc990c4b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_c1d939d225a8c620275e02aacc990c4b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.8MB
- SHA256 5bc8bf9c6010e5796ad1764a97d5a74a32803e17217e1e040eeda37167f4a6d0
- MD5 c1d939d225a8c620275e02aacc990c4b
- SHA1 980a13e48eec8e4146aa38e860363fac778fa7a8
- SHA512 8517db3d58fc2c043341a308a7d2b129e24ffb226d5431a376f801259f697e5f08f7e032712b60c223752885c49acdd615092e01fbdf3f93ca7a8f6df194fae4
- SSDEEP 12288:wTagjC7QaIjcV7VQeOgZ5btd5BlLGksLmONw/CX7YNmysags3R3DGwv5NjOytLs5:Caazc7VLq9Xozsr8zbhN6GwXOGIh4
- TLSH T16B95F156F7A400F9E267D278C9525A02DB727C8A076067CF23A41A975F33AE09F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1