General
- Target 2026-08-01_ba64cc52dd1c6c1e0e1d5ebe4e738a25_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260801-mm661ahd33
- SHA256 8c9292e90f9b1711ad07fcf7ee0f7f0d8de393a10bb35ebafa7cc64e16614550
- MD5 ba64cc52dd1c6c1e0e1d5ebe4e738a25
- SHA1 0f4415e19c41ca2ca651e537a07f03a5c05da400
- SHA512 2bcae2f8b5043c95ebefe4d7f5150179a7c17ef4f1a0aabc43316cd78d9595dc6fc1b73b271a6063f5503dd670949da56ae9b30e886465cbea00ed6b48c5c312
- SSDEEP 49152:8sdvj/TCkU9+pmsBU7130yAXLPsnon6yPt1zkczQQExfpT55Dmg27RnWGj:Sgo+t1/uD527BWG
- TLSH T1D1168C07E7B941E5C4BBD13C8A57965BFAB27849877197CB03A0865A4F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_ba64cc52dd1c6c1e0e1d5ebe4e738a25_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ba64cc52dd1c6c1e0e1d5ebe4e738a25_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 8c9292e90f9b1711ad07fcf7ee0f7f0d8de393a10bb35ebafa7cc64e16614550
- MD5 ba64cc52dd1c6c1e0e1d5ebe4e738a25
- SHA1 0f4415e19c41ca2ca651e537a07f03a5c05da400
- SHA512 2bcae2f8b5043c95ebefe4d7f5150179a7c17ef4f1a0aabc43316cd78d9595dc6fc1b73b271a6063f5503dd670949da56ae9b30e886465cbea00ed6b48c5c312
- SSDEEP 49152:8sdvj/TCkU9+pmsBU7130yAXLPsnon6yPt1zkczQQExfpT55Dmg27RnWGj:Sgo+t1/uD527BWG
- TLSH T1D1168C07E7B941E5C4BBD13C8A57965BFAB27849877197CB03A0865A4F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory