General
- Target 2026-08-02_971bcc819ec966f3f47b3a81f295748c_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260802-317yfsthjc
- SHA256 ae1fd11b505d55751616621758c2360159df802094f09b364f5f738d85549cff
- MD5 971bcc819ec966f3f47b3a81f295748c
- SHA1 40781fb7e4ff6dffd391029e58f64c3552f6efa9
- SHA512 1ac52dd0e1a5967607cc10cd5a1df9328491e1c6855752d70fb3fa40c63bb089ade8c8ed87c12ec1429fbde22ae066e07e7cf95a3deaa10cbc9520938d29d792
- SSDEEP 49152:MvmHGcnO2EvU/bMvo/SHEif5YL8NnjS3jNCWTPp8N7s8SJG/ebqfE:MTvUko/Szij0I8Ni1bqfE
- TLSH T13A0608ADA6DE00C6C070A4F4CD065795E2F2F864833249CB15E81A1FAE7FEED4E39654
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_971bcc819ec966f3f47b3a81f295748c_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_971bcc819ec966f3f47b3a81f295748c_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_971bcc819ec966f3f47b3a81f295748c_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 ae1fd11b505d55751616621758c2360159df802094f09b364f5f738d85549cff
- MD5 971bcc819ec966f3f47b3a81f295748c
- SHA1 40781fb7e4ff6dffd391029e58f64c3552f6efa9
- SHA512 1ac52dd0e1a5967607cc10cd5a1df9328491e1c6855752d70fb3fa40c63bb089ade8c8ed87c12ec1429fbde22ae066e07e7cf95a3deaa10cbc9520938d29d792
- SSDEEP 49152:MvmHGcnO2EvU/bMvo/SHEif5YL8NnjS3jNCWTPp8N7s8SJG/ebqfE:MTvUko/Szij0I8Ni1bqfE
- TLSH T13A0608ADA6DE00C6C070A4F4CD065795E2F2F864833249CB15E81A1FAE7FEED4E39654
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.