General
- Target 2026-10-11_8440b6bc0b8057f3aad73e10b442b511_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample261012-vstrvsg16q
- SHA256 4c48cf81d2b3b1d7068a9583e724f3fd9796c5b59d93125f25890976e3555011
- MD5 8440b6bc0b8057f3aad73e10b442b511
- SHA1 33e6fce8641c05e7ffef75dcfc18544f27c5b2f5
- SHA512 98677dd2c03ef36bebbf6e0ea1e13fd6ccc4c6a337e504b1ca93de36570f7087949de1b36a1733174ad17dcb7a6a3dce5e16399b0d357680f81621494b533633
- SSDEEP 49152:OvmHGcnO2EvU/bMvo/SHEif5YL8NnjSQjNCWTPp8N7s8SJG8A31w:OTvUko/Szdj0I8NiM31w
- TLSH T1940608ADA6DE40C6C070A4F4CD064795E2F2F864833249CB15E81A1FAE7FEED4E39654
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_8440b6bc0b8057f3aad73e10b442b511_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_8440b6bc0b8057f3aad73e10b442b511_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_8440b6bc0b8057f3aad73e10b442b511_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 4c48cf81d2b3b1d7068a9583e724f3fd9796c5b59d93125f25890976e3555011
- MD5 8440b6bc0b8057f3aad73e10b442b511
- SHA1 33e6fce8641c05e7ffef75dcfc18544f27c5b2f5
- SHA512 98677dd2c03ef36bebbf6e0ea1e13fd6ccc4c6a337e504b1ca93de36570f7087949de1b36a1733174ad17dcb7a6a3dce5e16399b0d357680f81621494b533633
- SSDEEP 49152:OvmHGcnO2EvU/bMvo/SHEif5YL8NnjSQjNCWTPp8N7s8SJG8A31w:OTvUko/Szdj0I8NiM31w
- TLSH T1940608ADA6DE40C6C070A4F4CD064795E2F2F864833249CB15E81A1FAE7FEED4E39654
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.