General
- Target 2026-08-22_46733b17d8ed4da7410f56cfa706ad53_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.4MB
- Sample260823-k3jpjavene
- SHA256 cf7d76d38fb57e73a168110f4687b7124d327df8b6668acce7a97a7dccf38e63
- MD5 46733b17d8ed4da7410f56cfa706ad53
- SHA1 18cf85de15734e388cbb874c47cb1d4463bd574b
- SHA512 0a244b1eb5ff1a557feffb13e91dc69db5cc10c8044dc88932d113ac2d307f1107351f4a479fe700dfd015b2c68d2508a6bf6a4bef7cfac13752516ccd839a2a
- SSDEEP 12288:vRZ5le6G12LDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTOyEx:ZXlXGPNyBo4kx929bL3Hnx
- TLSH T19F65011573E800F9F5BB9278C9618501EA32BC550B70E78F07A0467A9F77AE19D3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_46733b17d8ed4da7410f56cfa706ad53_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_46733b17d8ed4da7410f56cfa706ad53_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.4MB
- SHA256 cf7d76d38fb57e73a168110f4687b7124d327df8b6668acce7a97a7dccf38e63
- MD5 46733b17d8ed4da7410f56cfa706ad53
- SHA1 18cf85de15734e388cbb874c47cb1d4463bd574b
- SHA512 0a244b1eb5ff1a557feffb13e91dc69db5cc10c8044dc88932d113ac2d307f1107351f4a479fe700dfd015b2c68d2508a6bf6a4bef7cfac13752516ccd839a2a
- SSDEEP 12288:vRZ5le6G12LDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTOyEx:ZXlXGPNyBo4kx929bL3Hnx
- TLSH T19F65011573E800F9F5BB9278C9618501EA32BC550B70E78F07A0467A9F77AE19D3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory