General
- Target 2026-08-09_dbb6700185bf017fd3b968755bb08c94_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.9MB
- Sample260809-kzdn4sxydt
- SHA256 f84ceba150fbd5b705e4d1c74215359bd4fdf7448211a5e57da66b448618d7b8
- MD5 dbb6700185bf017fd3b968755bb08c94
- SHA1 13df474e09c7dc3701d2fff58a087c03c6085d61
- SHA512 d09c867ee79d2b2aa341120dc8976f3f31371b3a041ba89ea9c60515646b80b8488a91faaade0d9220366be6a6cec1312e001583a44c16e82044220357d7a506
- SSDEEP 49152:Ci0BSWtOZvUNg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTqr0DGPU9V4Y8mD:0tI8qRFTauXp0vV4Y8w
- TLSH T1E8167C07E6B940E5C0BBD13D8A969657FAB1385AC73197CB46A0875A1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_dbb6700185bf017fd3b968755bb08c94_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_dbb6700185bf017fd3b968755bb08c94_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 3.9MB
- SHA256 f84ceba150fbd5b705e4d1c74215359bd4fdf7448211a5e57da66b448618d7b8
- MD5 dbb6700185bf017fd3b968755bb08c94
- SHA1 13df474e09c7dc3701d2fff58a087c03c6085d61
- SHA512 d09c867ee79d2b2aa341120dc8976f3f31371b3a041ba89ea9c60515646b80b8488a91faaade0d9220366be6a6cec1312e001583a44c16e82044220357d7a506
- SSDEEP 49152:Ci0BSWtOZvUNg8qptYgpADvbf2OQDSIGAauJc0GaTZbwfITQTqr0DGPU9V4Y8mD:0tI8qRFTauXp0vV4Y8w
- TLSH T1E8167C07E6B940E5C0BBD13D8A969657FAB1385AC73197CB46A0875A1F237F09E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory