General
- Target 2026-08-09_c09add8809099b6c465a725afb17fb58_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.2MB
- Sample260809-wvk36stbkh
- SHA256 94359e25b43b919fd28224b021df03012b2fdfbba4752d4ef77c252c05a864b1
- MD5 c09add8809099b6c465a725afb17fb58
- SHA1 175b84d26a483956a361f4540f1a12570365d0fb
- SHA512 81d7698fcb4939b6ba6393880e629d17302529f3bae7152125da2db21a011d8b3196487725454a08f475a8c49c2f6bfe9960a27379a0c485bdb88de4b2e19e1d
- SSDEEP 24576:wxVIW5Ogm9vHsZ4kahCatr0zAiX90z/F0jsFB3SQkq:KH/m9vFFhCaB0zj0yjoB2
- TLSH T1D045CF16A7A901FCD0BBD2398A564902F776780543B19BDF03D09AA72F276D19F3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_c09add8809099b6c465a725afb17fb58_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c09add8809099b6c465a725afb17fb58_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.2MB
- SHA256 94359e25b43b919fd28224b021df03012b2fdfbba4752d4ef77c252c05a864b1
- MD5 c09add8809099b6c465a725afb17fb58
- SHA1 175b84d26a483956a361f4540f1a12570365d0fb
- SHA512 81d7698fcb4939b6ba6393880e629d17302529f3bae7152125da2db21a011d8b3196487725454a08f475a8c49c2f6bfe9960a27379a0c485bdb88de4b2e19e1d
- SSDEEP 24576:wxVIW5Ogm9vHsZ4kahCatr0zAiX90z/F0jsFB3SQkq:KH/m9vFFhCaB0zj0yjoB2
- TLSH T1D045CF16A7A901FCD0BBD2398A564902F776780543B19BDF03D09AA72F276D19F3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1