General
- Target 2026-09-24_57bed30bafed9948c2f1ab356d08a32f_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.2MB
- Sample260924-eakhgazz6j
- SHA256 f5e803b11b0266b11ab5bfe8d97c4cb62a9b2269d6e46bd712bc4c2188f3e4b0
- MD5 57bed30bafed9948c2f1ab356d08a32f
- SHA1 ad6f46603bbc0dbe837c58e8d20333a9834ad114
- SHA512 409e0534cced0fc0aa49e046557c6a7c096167dba93e3310fe35f6e800e84b4035f8da2f56ff165b84bdf2eb35bfaf39920392dce0228ba0fe1906d566970148
- SSDEEP 24576:9Q9KRfK5HPRHLEpATTT7qAFu14yTUxmb57GBiOl6a8JTth/RWZvR6wQQ92pN3q:OwR2NEpATTBu1421b5+Pl6bJTIZ5jdg6
- TLSH T1DF45E096A2E900F5E077913AC9C64607E7F2B4101721AFDF07648A662F33ADA5E3F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_57bed30bafed9948c2f1ab356d08a32f_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_57bed30bafed9948c2f1ab356d08a32f_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.2MB
- SHA256 f5e803b11b0266b11ab5bfe8d97c4cb62a9b2269d6e46bd712bc4c2188f3e4b0
- MD5 57bed30bafed9948c2f1ab356d08a32f
- SHA1 ad6f46603bbc0dbe837c58e8d20333a9834ad114
- SHA512 409e0534cced0fc0aa49e046557c6a7c096167dba93e3310fe35f6e800e84b4035f8da2f56ff165b84bdf2eb35bfaf39920392dce0228ba0fe1906d566970148
- SSDEEP 24576:9Q9KRfK5HPRHLEpATTT7qAFu14yTUxmb57GBiOl6a8JTth/RWZvR6wQQ92pN3q:OwR2NEpATTBu1421b5+Pl6bJTIZ5jdg6
- TLSH T1DF45E096A2E900F5E077913AC9C64607E7F2B4101721AFDF07648A662F33ADA5E3F711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory