General
- Target 2026-09-15_d7efe92714bea25994af96dc32391a05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.1MB
- Sample260915-1awrdsha93
- SHA256 12e2541a7800976116a9eaf74bd2cdfc122236c48a9645329b60f6f10465148a
- MD5 d7efe92714bea25994af96dc32391a05
- SHA1 a11795eefb9e12199f71a9bc3501251d88efada4
- SHA512 f699736496480cc389788fb3e54c1558ba41b4967399e592ec93257448dae136601119a37e747d7804aa4e9e378c519fcb12ff4e65097028bd4c79055dda4d06
- SSDEEP 49152:EVgp0aP+gsDsSttrCMOvmdGVagluIdnyDInjUTQcCh3hnd7PAyTbgHUWrOxeHq/v:Jp0YzIDI4a2HUMOl
- TLSH T1FB167B1BA6B940F9C0BBD1798A569617FAB2780A873197CB4791471B1F237F09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-15_d7efe92714bea25994af96dc32391a05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-15_d7efe92714bea25994af96dc32391a05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.1MB
- SHA256 12e2541a7800976116a9eaf74bd2cdfc122236c48a9645329b60f6f10465148a
- MD5 d7efe92714bea25994af96dc32391a05
- SHA1 a11795eefb9e12199f71a9bc3501251d88efada4
- SHA512 f699736496480cc389788fb3e54c1558ba41b4967399e592ec93257448dae136601119a37e747d7804aa4e9e378c519fcb12ff4e65097028bd4c79055dda4d06
- SSDEEP 49152:EVgp0aP+gsDsSttrCMOvmdGVagluIdnyDInjUTQcCh3hnd7PAyTbgHUWrOxeHq/v:Jp0YzIDI4a2HUMOl
- TLSH T1FB167B1BA6B940F9C0BBD1798A569617FAB2780A873197CB4791471B1F237F09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stealc stealer Version 3
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1