General
- Target 2026-08-08_58b367e5aa00bbff857f34caba4b3c91_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.1MB
- Sample260809-akmncsxbjc
- SHA256 0e6fdba76419c2dccc69bfbc24f707493ceee14d9d9385be05f56016b1702e55
- MD5 58b367e5aa00bbff857f34caba4b3c91
- SHA1 cf3aad436861800ff9afe6e1e777a28d76f59790
- SHA512 df75c0c1a1f6dec50852988bd4755e304a183eacfb7436ea2d148338b336c71429f2be4781b2e095e709e8b09761379406220470f352639eaf92d470cb241422
- SSDEEP 24576:fXWSDSG0qIwDE1X6MgXe4i7ojhsP5Lgrk1TWb4AN5:fVDaue30jaNf1TWbdz
- TLSH T1B545E116B7D002F9D0B7D179CA568B71FAB2BC49072097CB03E496962F276A15F3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_58b367e5aa00bbff857f34caba4b3c91_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_58b367e5aa00bbff857f34caba4b3c91_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.1MB
- SHA256 0e6fdba76419c2dccc69bfbc24f707493ceee14d9d9385be05f56016b1702e55
- MD5 58b367e5aa00bbff857f34caba4b3c91
- SHA1 cf3aad436861800ff9afe6e1e777a28d76f59790
- SHA512 df75c0c1a1f6dec50852988bd4755e304a183eacfb7436ea2d148338b336c71429f2be4781b2e095e709e8b09761379406220470f352639eaf92d470cb241422
- SSDEEP 24576:fXWSDSG0qIwDE1X6MgXe4i7ojhsP5Lgrk1TWb4AN5:fVDaue30jaNf1TWbdz
- TLSH T1B545E116B7D002F9D0B7D179CA568B71FAB2BC49072097CB03E496962F276A15F3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1