General
- Target 2026-08-15_69bf68f21c49740806bba9ff4eb4b813_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260815-d96pbadf75
- SHA256 5c00a48944c0646ac4e2092053e7cff415bb629abb6f1cd32f56e12dc5e1d50a
- MD5 69bf68f21c49740806bba9ff4eb4b813
- SHA1 690e65a71c29fc8c8397ba01a05da4a89535100a
- SHA512 3b30bf9d38604fa234b5bd0658b9b2632b212f6df980cb48fc27767d8ce5365e0ab8286dd982ccced1d3aa3e2f277b35cb1e5cfc6193e2360cc9d71420c3cc8e
- SSDEEP 49152:N7mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYt2Dmg27RnWGj:dO2sGJeDtD527BWG
- TLSH T1C5167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB47A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_69bf68f21c49740806bba9ff4eb4b813_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_69bf68f21c49740806bba9ff4eb4b813_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 5c00a48944c0646ac4e2092053e7cff415bb629abb6f1cd32f56e12dc5e1d50a
- MD5 69bf68f21c49740806bba9ff4eb4b813
- SHA1 690e65a71c29fc8c8397ba01a05da4a89535100a
- SHA512 3b30bf9d38604fa234b5bd0658b9b2632b212f6df980cb48fc27767d8ce5365e0ab8286dd982ccced1d3aa3e2f277b35cb1e5cfc6193e2360cc9d71420c3cc8e
- SSDEEP 49152:N7mZ5UxCNBjHYi3ScaknEOyq+VPRT7uGAc9e7ao1d8bSTJGJCYt2Dmg27RnWGj:dO2sGJeDtD527BWG
- TLSH T1C5167B07E7B940E5C0BBD13D8A579657FAB2784A877197CB47A0861A1F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory