General
- Target 2026-08-07_9ade616731111062f92d0bd63a0088ac_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample260807-l1xdaafb74
- SHA256 441c003ca5e7b4320e4efdf748403a3b0974eacfc553b3cd22bbf19e4bb179ef
- MD5 9ade616731111062f92d0bd63a0088ac
- SHA1 29d8e0c8f9fe879ff0ed25c4cfc50505bf304caf
- SHA512 db322b90984f2f05c205b27e7d75f8a1dfdce2dcc094f272b2970d9df57f944eff4d108b54e04a8b7c431bd313f123f17dc1038497e41b4409a0204435ae9591
- SSDEEP 49152:CvmHGcnO2EvU/bMvo/SHEif5YL8NnjS7jNCWTPp8N7s8SJGHIg5w:CTvUko/Szmj0I8NiIIg5w
- TLSH T1CC0608ADA6DE00C6C070A4F4CD165795E2F2F864833149CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_9ade616731111062f92d0bd63a0088ac_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_9ade616731111062f92d0bd63a0088ac_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_9ade616731111062f92d0bd63a0088ac_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 441c003ca5e7b4320e4efdf748403a3b0974eacfc553b3cd22bbf19e4bb179ef
- MD5 9ade616731111062f92d0bd63a0088ac
- SHA1 29d8e0c8f9fe879ff0ed25c4cfc50505bf304caf
- SHA512 db322b90984f2f05c205b27e7d75f8a1dfdce2dcc094f272b2970d9df57f944eff4d108b54e04a8b7c431bd313f123f17dc1038497e41b4409a0204435ae9591
- SSDEEP 49152:CvmHGcnO2EvU/bMvo/SHEif5YL8NnjS7jNCWTPp8N7s8SJGHIg5w:CTvUko/Szmj0I8NiIIg5w
- TLSH T1CC0608ADA6DE00C6C070A4F4CD165795E2F2F864833149CB15E81A1FAE3FEED4E39664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.