General
- Target 2026-09-15_530b35ef4036a464d48d7870fc387c07_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.6MB
- Sample260915-ws9czsy1a1
- SHA256 596b85a5eb108df92e3f596a8e73ef3637229352ad7003803ad8dc175a0e294d
- MD5 530b35ef4036a464d48d7870fc387c07
- SHA1 ad7771cd38ed8ea00c898adf31fbcfa332dca9ea
- SHA512 f35bd40031863037f3d90989befeb58e8ef766e6052c1d9c04c17b15e57f04b7422a77d4f5f5cf854e8bea48544df2198876580399cb0db27c4f618d56d251b5
- SSDEEP 24576:/OQpMB8btddDVisu/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:/OQpS8bRD8/LNiXicJFFRGNzj3
- TLSH T1B175E10AF7A814F5E1B7D138C9669506E7B67C6D432097CF23D85A662F236D08E3C721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-15_530b35ef4036a464d48d7870fc387c07_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-15_530b35ef4036a464d48d7870fc387c07_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 1.6MB
- SHA256 596b85a5eb108df92e3f596a8e73ef3637229352ad7003803ad8dc175a0e294d
- MD5 530b35ef4036a464d48d7870fc387c07
- SHA1 ad7771cd38ed8ea00c898adf31fbcfa332dca9ea
- SHA512 f35bd40031863037f3d90989befeb58e8ef766e6052c1d9c04c17b15e57f04b7422a77d4f5f5cf854e8bea48544df2198876580399cb0db27c4f618d56d251b5
- SSDEEP 24576:/OQpMB8btddDVisu/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:/OQpS8bRD8/LNiXicJFFRGNzj3
- TLSH T1B175E10AF7A814F5E1B7D138C9669506E7B67C6D432097CF23D85A662F236D08E3C721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stealc stealer Version 3
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1