General
- Target 2026-08-06_1b47809bb35bea0b4c947441f702e5f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260806-madc6ahn8z
- SHA256 92c5875169658812973bc816a537d13cb8b3cf5b071b69b30db239701f38c897
- MD5 1b47809bb35bea0b4c947441f702e5f0
- SHA1 c4eeb4670b58f78529b4739b969800b63809cfa9
- SHA512 9f7ffb669b263903133b12beb68f20e12784c0352188dab44a3d13ebe83e3307640925471f7d10bf789be43d1503d59f21c548aadde6301555b4784b302d851e
- SSDEEP 49152:wvmHGcnO2EvU/bMvo/SHEif5YL8NnjSsjNCWTPp8N7s8SJGQQ+v:wTvUko/SzRj0I8NiK+v
- TLSH T14A0608ADA6DE00C6C070A4F4CD065795E2F2F864833149CB15E81A1FAE7FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_1b47809bb35bea0b4c947441f702e5f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_1b47809bb35bea0b4c947441f702e5f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_1b47809bb35bea0b4c947441f702e5f0_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 92c5875169658812973bc816a537d13cb8b3cf5b071b69b30db239701f38c897
- MD5 1b47809bb35bea0b4c947441f702e5f0
- SHA1 c4eeb4670b58f78529b4739b969800b63809cfa9
- SHA512 9f7ffb669b263903133b12beb68f20e12784c0352188dab44a3d13ebe83e3307640925471f7d10bf789be43d1503d59f21c548aadde6301555b4784b302d851e
- SSDEEP 49152:wvmHGcnO2EvU/bMvo/SHEif5YL8NnjSsjNCWTPp8N7s8SJGQQ+v:wTvUko/SzRj0I8NiK+v
- TLSH T14A0608ADA6DE00C6C070A4F4CD065795E2F2F864833149CB15E81A1FAE7FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.