General
- Target 2026-08-05_03d7d470c1b6bbbf06f94a33da4e15f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260805-dy2k8avthz
- SHA256 44eddb44c921853c884ccea7f0bcdbc9074db6b596d49e423a261ba5c5ee1cf1
- MD5 03d7d470c1b6bbbf06f94a33da4e15f0
- SHA1 0327cee3dae79101ef9fedb4e85773969f5ef2a5
- SHA512 9e521f1341f8d2b0414332ae068db62e7882c9b15c0960004223611180c904e7b83fce1d6333e28d091e680e6e8bf05d7ab468c34771d00abdbf04f5b0b86dd7
- SSDEEP 49152:/vmHGcnO2EvU/bMvo/SHEif5YL8NnjS9jNCWTPp8N7s8SJGrJ:/TvUko/Szwj0I8NiS
- TLSH T1170618ADA6DE00C6C070A4F4CD165795E2F2F854833149CB15E81A1FAE3FEED4E39A64
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_03d7d470c1b6bbbf06f94a33da4e15f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_03d7d470c1b6bbbf06f94a33da4e15f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_03d7d470c1b6bbbf06f94a33da4e15f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 44eddb44c921853c884ccea7f0bcdbc9074db6b596d49e423a261ba5c5ee1cf1
- MD5 03d7d470c1b6bbbf06f94a33da4e15f0
- SHA1 0327cee3dae79101ef9fedb4e85773969f5ef2a5
- SHA512 9e521f1341f8d2b0414332ae068db62e7882c9b15c0960004223611180c904e7b83fce1d6333e28d091e680e6e8bf05d7ab468c34771d00abdbf04f5b0b86dd7
- SSDEEP 49152:/vmHGcnO2EvU/bMvo/SHEif5YL8NnjS9jNCWTPp8N7s8SJGrJ:/TvUko/Szwj0I8NiS
- TLSH T1170618ADA6DE00C6C070A4F4CD165795E2F2F854833149CB15E81A1FAE3FEED4E39A64
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.