General
- Target 2026-08-10_71a8792bf11601ac8ae7c265aa4578de_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- Sample260810-q3aphszejc
- SHA256 475753c0ed4f6eb0e7fd65cfcb4ae754eccd656c31c0f895657bc40bc47d41d3
- MD5 71a8792bf11601ac8ae7c265aa4578de
- SHA1 0a406284ffb21848eb4b76eeb72347d1801b5c43
- SHA512 419573e78f71e25d351578534f036aa7e9274b721ac2d29c5689798ebcc9aa05c898745e7e0a0ff644dfffb3dbb6938549c570e52041d6839415b8c353a59c98
- SSDEEP 24576:v5FxZp1b1TOE5lOOM3tBZPzwFa7/wOifnz20:vxbq+4ZPzwFI/wOifnzH
- TLSH T13485E006F7A604F9E5B3923889A28502E7727C5A0370D7EF13A4466B1F376D09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_71a8792bf11601ac8ae7c265aa4578de_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_71a8792bf11601ac8ae7c265aa4578de_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.7MB
- SHA256 475753c0ed4f6eb0e7fd65cfcb4ae754eccd656c31c0f895657bc40bc47d41d3
- MD5 71a8792bf11601ac8ae7c265aa4578de
- SHA1 0a406284ffb21848eb4b76eeb72347d1801b5c43
- SHA512 419573e78f71e25d351578534f036aa7e9274b721ac2d29c5689798ebcc9aa05c898745e7e0a0ff644dfffb3dbb6938549c570e52041d6839415b8c353a59c98
- SSDEEP 24576:v5FxZp1b1TOE5lOOM3tBZPzwFa7/wOifnz20:vxbq+4ZPzwFI/wOifnzH
- TLSH T13485E006F7A604F9E5B3923889A28502E7727C5A0370D7EF13A4466B1F376D09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1