General
- Target 2026-08-01_d38dcab01a5020e0287b0b1f4a59a98d_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260801-pyxg2sbk2v
- SHA256 0a4e2608dfa3cb2e84de500cf0ea6eabb86d804683cbd4ce9af0e17b2d72f3c7
- MD5 d38dcab01a5020e0287b0b1f4a59a98d
- SHA1 5d080dcaa83ac326c95672bb9c92e7966e55ce4a
- SHA512 fd156a765d471e60cab6f3c6376e55ada9038c3ef38452eca54930e01e39c76e6d638aefad31e46dc1e8a7184ae32e378359cee6654964ff4d85ab84613efa2b
- SSDEEP 49152:fvmHGcnO2EvU/bMvo/SHEif5YL8NnjS8jNCWTPp8N7s8SJGgiAe8:fTvUko/SzFj0I8Ni3
- TLSH T17F0618ADA6DE00C6C070A4F4CD065795E2F2F864837149CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_d38dcab01a5020e0287b0b1f4a59a98d_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_d38dcab01a5020e0287b0b1f4a59a98d_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_d38dcab01a5020e0287b0b1f4a59a98d_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 0a4e2608dfa3cb2e84de500cf0ea6eabb86d804683cbd4ce9af0e17b2d72f3c7
- MD5 d38dcab01a5020e0287b0b1f4a59a98d
- SHA1 5d080dcaa83ac326c95672bb9c92e7966e55ce4a
- SHA512 fd156a765d471e60cab6f3c6376e55ada9038c3ef38452eca54930e01e39c76e6d638aefad31e46dc1e8a7184ae32e378359cee6654964ff4d85ab84613efa2b
- SSDEEP 49152:fvmHGcnO2EvU/bMvo/SHEif5YL8NnjS8jNCWTPp8N7s8SJGgiAe8:fTvUko/SzFj0I8Ni3
- TLSH T17F0618ADA6DE00C6C070A4F4CD065795E2F2F864837149CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.