General
- Target 2026-08-02_463834da0a4924ba3732bcd6e785d072_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260802-drjrtscd87
- SHA256 fc2a2ac62471495b7eaccc275a03b0087ec7a65c3dfa1a22c22bc7807a9df9a0
- MD5 463834da0a4924ba3732bcd6e785d072
- SHA1 00fa6cf51e5fc10b6458dd2fb30e21ae82d178f2
- SHA512 811e019a2196840a3c4d3a3106d4664fc2f714fef5894a66dd74bcd3ef0bd338479be4c6e3988341af06e775ed1f58d1f3150c868eae3f840bd24b05b68c424f
- SSDEEP 49152:ivmHGcnO2EvU/bMvo/SHEif5YL8NnjS2gjNCWTPp8N7s8SJGiPC:iTvUko/SzZgj0I8Ni/a
- TLSH T11D0608ADA6DE00C6C070A4F4CD165795E2F2F864833149CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_463834da0a4924ba3732bcd6e785d072_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_463834da0a4924ba3732bcd6e785d072_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_463834da0a4924ba3732bcd6e785d072_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 fc2a2ac62471495b7eaccc275a03b0087ec7a65c3dfa1a22c22bc7807a9df9a0
- MD5 463834da0a4924ba3732bcd6e785d072
- SHA1 00fa6cf51e5fc10b6458dd2fb30e21ae82d178f2
- SHA512 811e019a2196840a3c4d3a3106d4664fc2f714fef5894a66dd74bcd3ef0bd338479be4c6e3988341af06e775ed1f58d1f3150c868eae3f840bd24b05b68c424f
- SSDEEP 49152:ivmHGcnO2EvU/bMvo/SHEif5YL8NnjS2gjNCWTPp8N7s8SJGiPC:iTvUko/SzZgj0I8Ni/a
- TLSH T11D0608ADA6DE00C6C070A4F4CD165795E2F2F864833149CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.