General
- Target 2026-08-03_3cdbeade6a664dd0953300dc6f6b547c_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.9MB
- Sample260803-w2s3cswaph
- SHA256 454c767071197e81a309c4c5f5bff57ead232423a3d289f12d6c5d4851f69a06
- MD5 3cdbeade6a664dd0953300dc6f6b547c
- SHA1 738d6b3637c3dd26e3a5775d5824e6ea3e43793b
- SHA512 8daa828cecc5a83c96d71d7bb07be9c4bd9df84f2d5d78b4097c6d17366bf3283a109a7e3aee85f05a1433ac240fa6436ca6b3633644bbae41e2919af7d4e512
- SSDEEP 24576:pG88u8FpJqH1bzria7/mdlEvXGroGQFF6/rJ5YVvlpTn:87ZFPqVea7/iEPJpFW5w
- TLSH T16395F16576E102F0D477D03889824663F6B2B8211364EBDF07AC8B561F33AE55B7EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_3cdbeade6a664dd0953300dc6f6b547c_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_3cdbeade6a664dd0953300dc6f6b547c_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.9MB
- SHA256 454c767071197e81a309c4c5f5bff57ead232423a3d289f12d6c5d4851f69a06
- MD5 3cdbeade6a664dd0953300dc6f6b547c
- SHA1 738d6b3637c3dd26e3a5775d5824e6ea3e43793b
- SHA512 8daa828cecc5a83c96d71d7bb07be9c4bd9df84f2d5d78b4097c6d17366bf3283a109a7e3aee85f05a1433ac240fa6436ca6b3633644bbae41e2919af7d4e512
- SSDEEP 24576:pG88u8FpJqH1bzria7/mdlEvXGroGQFF6/rJ5YVvlpTn:87ZFPqVea7/iEPJpFW5w
- TLSH T16395F16576E102F0D477D03889824663F6B2B8211364EBDF07AC8B561F33AE55B7EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1