General
- Target 2026-08-09_c8b2fbd462433df8669bb1afa9dcf9fd_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260809-te77natydz
- SHA256 898a2e03844bbe934a90ded2417315a0cfba1328d4ab559ef8bf9975cafe1b02
- MD5 c8b2fbd462433df8669bb1afa9dcf9fd
- SHA1 c444c3ffc6cde89858c03c2ac41baa84b2df8fd4
- SHA512 fe8c27713dda124e86876d6e1e378354d795867199e8dc920b3102e580d506812f081fb82218b29a00767c784cb46aad549e1a1828fd412d138a5ee23d227f3a
- SSDEEP 49152:F7mZ5UxCNBjHYi3ScakzEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtuLNiXicJFFRGN:RO2sGJeDF7wRGpj3
- TLSH T10E167B07A7B940F5C0BBD13D8A579657FAB2785A877197CB43A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_c8b2fbd462433df8669bb1afa9dcf9fd_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c8b2fbd462433df8669bb1afa9dcf9fd_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 898a2e03844bbe934a90ded2417315a0cfba1328d4ab559ef8bf9975cafe1b02
- MD5 c8b2fbd462433df8669bb1afa9dcf9fd
- SHA1 c444c3ffc6cde89858c03c2ac41baa84b2df8fd4
- SHA512 fe8c27713dda124e86876d6e1e378354d795867199e8dc920b3102e580d506812f081fb82218b29a00767c784cb46aad549e1a1828fd412d138a5ee23d227f3a
- SSDEEP 49152:F7mZ5UxCNBjHYi3ScakzEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYtuLNiXicJFFRGN:RO2sGJeDF7wRGpj3
- TLSH T10E167B07A7B940F5C0BBD13D8A579657FAB2785A877197CB43A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1