General
- Target 2026-08-13_90631c657a6302784db07cc06441ebf5_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample260813-wp2hzacd83
- SHA256 1907a933689eb9c5f396b6694032d8538ef7a8ba54c835f76d8e6c0ea015c3e5
- MD5 90631c657a6302784db07cc06441ebf5
- SHA1 484e2e8f835ff71799b9591c86ab6188bea6dbfc
- SHA512 54435509902103ba086b38e8ff555f17c3b30e572b81651c249348e1d7502d85519d6c274231b6388e04cf8cb6160131ea3a993b7bf743edc53c98c923963beb
- SSDEEP 49152:LpxdjK3xEPK3Hkcm4L8A5iliXfJJnB58MlSKl2HJp8z:LLhTKXkcmgXfJie
- TLSH T1B5D57D6D7AED00D6C135E1B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_90631c657a6302784db07cc06441ebf5_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_90631c657a6302784db07cc06441ebf5_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_90631c657a6302784db07cc06441ebf5_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 1907a933689eb9c5f396b6694032d8538ef7a8ba54c835f76d8e6c0ea015c3e5
- MD5 90631c657a6302784db07cc06441ebf5
- SHA1 484e2e8f835ff71799b9591c86ab6188bea6dbfc
- SHA512 54435509902103ba086b38e8ff555f17c3b30e572b81651c249348e1d7502d85519d6c274231b6388e04cf8cb6160131ea3a993b7bf743edc53c98c923963beb
- SSDEEP 49152:LpxdjK3xEPK3Hkcm4L8A5iliXfJJnB58MlSKl2HJp8z:LLhTKXkcmgXfJie
- TLSH T1B5D57D6D7AED00D6C135E1B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.