General
- Target 2026-09-03_e5f6d4c2996ac5370f4bf481e51027c6_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260903-yvv99abe54
- SHA256 960c4dbf9da8abf1fd082d9e76dc840459042ebe13449345d92315a103db5b51
- MD5 e5f6d4c2996ac5370f4bf481e51027c6
- SHA1 9eb2aed75f0947033e671832100fc196593e86f0
- SHA512 731f144111a56735d8e58806c8e4beb41f219f6ba591d2da71b323ff6b53a7e162266a03ab1b55cec9f912730ae64552c4c606f5c0984dc4ac422987cc051a73
- SSDEEP 49152:X+D9r1XxKxQUIFFdMm9n+4gaJ6Ag1BXVo/cRAdaCQ5+CTXsLyOsQtZyFxTA:OzY3aaFo8F8vtZ+xTA
- TLSH T1D1167B17E2B941E5C0BBD13D8A979657FEB2780A877197CB4390861A5F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_e5f6d4c2996ac5370f4bf481e51027c6_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_e5f6d4c2996ac5370f4bf481e51027c6_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 960c4dbf9da8abf1fd082d9e76dc840459042ebe13449345d92315a103db5b51
- MD5 e5f6d4c2996ac5370f4bf481e51027c6
- SHA1 9eb2aed75f0947033e671832100fc196593e86f0
- SHA512 731f144111a56735d8e58806c8e4beb41f219f6ba591d2da71b323ff6b53a7e162266a03ab1b55cec9f912730ae64552c4c606f5c0984dc4ac422987cc051a73
- SSDEEP 49152:X+D9r1XxKxQUIFFdMm9n+4gaJ6Ag1BXVo/cRAdaCQ5+CTXsLyOsQtZyFxTA:OzY3aaFo8F8vtZ+xTA
- TLSH T1D1167B17E2B941E5C0BBD13D8A979657FEB2780A877197CB4390861A5F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory