General
- Target 2026-09-30_2ea96a83313bae73211bef2be3d537c7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 3.0MB
- Sample260930-ptt65avy8r
- SHA256 6e35e4ab50b159c0b1ed00c0f36df2a0f2004dd18e26be6ad44476af92665645
- MD5 2ea96a83313bae73211bef2be3d537c7
- SHA1 353275f8eadd6fa2b2f6080bed437cbf3a9957fe
- SHA512 aaac20ff6a13c47274ee3b5cf16f1b18683ed4d74928822ff0e24d7a124fa286332e96a6dbb42bebc1d5784179038fea4c81ce185ed7515f463b5cdc10bfc8ee
- SSDEEP 49152:SDMMfdJIcykCMDsGLBDlb4dUKIvw9buA4M91b0xe/9A4/YaX25:4WcPsCplbm6+n3gxKzQam
- TLSH T1F7E50265A3D910E9E473C278C9A39513EB72BC164330EADF03A495252F337D56E3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-30_2ea96a83313bae73211bef2be3d537c7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_2ea96a83313bae73211bef2be3d537c7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_2ea96a83313bae73211bef2be3d537c7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 3.0MB
- SHA256 6e35e4ab50b159c0b1ed00c0f36df2a0f2004dd18e26be6ad44476af92665645
- MD5 2ea96a83313bae73211bef2be3d537c7
- SHA1 353275f8eadd6fa2b2f6080bed437cbf3a9957fe
- SHA512 aaac20ff6a13c47274ee3b5cf16f1b18683ed4d74928822ff0e24d7a124fa286332e96a6dbb42bebc1d5784179038fea4c81ce185ed7515f463b5cdc10bfc8ee
- SSDEEP 49152:SDMMfdJIcykCMDsGLBDlb4dUKIvw9buA4M91b0xe/9A4/YaX25:4WcPsCplbm6+n3gxKzQam
- TLSH T1F7E50265A3D910E9E473C278C9A39513EB72BC164330EADF03A495252F337D56E3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.