General
- Target 2026-08-08_e0049e57d3a14fc4546479a5e1cc701d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260808-vn982san4s
- SHA256 51a3a13ea226a2336fe9196293e540975a8eca85e2e61ff4dc580c142e3f0cc0
- MD5 e0049e57d3a14fc4546479a5e1cc701d
- SHA1 bb4e6f180ee6d898fe4464d0a88b2a422a8f54fe
- SHA512 83679475ba023a9b5256d057818c119940aa4e52f4eab05f5ae87dc24bd87a8f840a91557732210afa03fc9a3347c1d774a5b7c6f0b4b183353901c2b45de50e
- SSDEEP 49152:27mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtGkitCsnONtMQq:WO2sGJeDjnCsnO/MQ+hwQ/Ao
- TLSH T1FA167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB43A0865A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e0049e57d3a14fc4546479a5e1cc701d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e0049e57d3a14fc4546479a5e1cc701d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 51a3a13ea226a2336fe9196293e540975a8eca85e2e61ff4dc580c142e3f0cc0
- MD5 e0049e57d3a14fc4546479a5e1cc701d
- SHA1 bb4e6f180ee6d898fe4464d0a88b2a422a8f54fe
- SHA512 83679475ba023a9b5256d057818c119940aa4e52f4eab05f5ae87dc24bd87a8f840a91557732210afa03fc9a3347c1d774a5b7c6f0b4b183353901c2b45de50e
- SSDEEP 49152:27mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtGkitCsnONtMQq:WO2sGJeDjnCsnO/MQ+hwQ/Ao
- TLSH T1FA167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB43A0865A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1