General
- Target 2026-10-10_385b429c26f11b0269479654a5c40853_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.0MB
- Sample261011-vfmg1stygs
- SHA256 6ba36d7eec23478f8cb9a2a5a6b3155481e6ef8347cf5c74698b934b4c232abc
- MD5 385b429c26f11b0269479654a5c40853
- SHA1 9133b6b719e7b322ba3694812811b6904bf7c293
- SHA512 364d49a71941975746187afeacefd3745b74018a2d41623e6fc00324838e26e85859019c6521dc669c4fd53d8f0250393d903e7712fb2164eac84e68002b7c9f
- SSDEEP 49152:tMmi8sR+ft983Dl3gEe8xA+S7SDPO7QD1y37die4h:0R+l9EDl3VxA+86O7Zah
- TLSH T19E95F015B69812FDE177C1BEC9564525FBB2B80687628BCB03A047572F2FAD85F3A301
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_385b429c26f11b0269479654a5c40853_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_385b429c26f11b0269479654a5c40853_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.0MB
- SHA256 6ba36d7eec23478f8cb9a2a5a6b3155481e6ef8347cf5c74698b934b4c232abc
- MD5 385b429c26f11b0269479654a5c40853
- SHA1 9133b6b719e7b322ba3694812811b6904bf7c293
- SHA512 364d49a71941975746187afeacefd3745b74018a2d41623e6fc00324838e26e85859019c6521dc669c4fd53d8f0250393d903e7712fb2164eac84e68002b7c9f
- SSDEEP 49152:tMmi8sR+ft983Dl3gEe8xA+S7SDPO7QD1y37die4h:0R+l9EDl3VxA+86O7Zah
- TLSH T19E95F015B69812FDE177C1BEC9564525FBB2B80687628BCB03A047572F2FAD85F3A301
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1