General
- Target 2026-08-08_85c8014601c4b256bef6d1177d174fa8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260808-ns5qssdc75
- SHA256 cf99c2671f091c06fdd39de712b41623f3cad5d4db83c599b7c14008d005e8b3
- MD5 85c8014601c4b256bef6d1177d174fa8
- SHA1 9a81c50e91a50c9f3ae400f92dc74f20d76669b6
- SHA512 cad6076cc77a1b2fefc01249445568403aa7bf570a236923f0b42badf413e0c0e75ab49e6e69aed3935f8275e98a9a5c854599d8a2224f5e4ee2d1a1a1ea14cd
- SSDEEP 49152:9sdvj/TCkU9+pmsBU7130yAJLPsnon6yPt1zkczQQExfpT5nt2r4PRSEk1ul:Hao+t1/Mt2sEE5
- TLSH T1FF167C07E7B941E5C4BBD13D8A57965BFAB27849877197CB03A0865A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_85c8014601c4b256bef6d1177d174fa8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_85c8014601c4b256bef6d1177d174fa8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 cf99c2671f091c06fdd39de712b41623f3cad5d4db83c599b7c14008d005e8b3
- MD5 85c8014601c4b256bef6d1177d174fa8
- SHA1 9a81c50e91a50c9f3ae400f92dc74f20d76669b6
- SHA512 cad6076cc77a1b2fefc01249445568403aa7bf570a236923f0b42badf413e0c0e75ab49e6e69aed3935f8275e98a9a5c854599d8a2224f5e4ee2d1a1a1ea14cd
- SSDEEP 49152:9sdvj/TCkU9+pmsBU7130yAJLPsnon6yPt1zkczQQExfpT5nt2r4PRSEk1ul:Hao+t1/Mt2sEE5
- TLSH T1FF167C07E7B941E5C4BBD13D8A57965BFAB27849877197CB03A0865A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1