General
- Target 2026-11-03_74889cdeded1ca41f1605bfff497a7ad_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.2MB
- Sample261104-vdlspsbx3y
- SHA256 6fd26d4e52eb807cdc78f2b473a5ad587ac6ce57a9c9dec01c4f78de812d2828
- MD5 74889cdeded1ca41f1605bfff497a7ad
- SHA1 080357fed9d11c2c8e5cb9c363667a497e2be780
- SHA512 004fda256a681e91c10632147ddeed2a59e9f1a1e6fb0159b8ad1dbddc7e4eeabfbec6ee36f4075d5c56c5ef1e32f18c1668224c4e0163284dc088911d0a32ba
- SSDEEP 49152:yPZUsWq86hVJ2HiYx3KNRIbXmYv5WhuC2nUcsV6miMyQzT3QhCDmg27RnWGj:H5b20nMkXXCD527BWG
- TLSH T105167B57E6B940E9D0BAD139CA979617FAB2781A873197CB0790471A1F237F09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_74889cdeded1ca41f1605bfff497a7ad_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_74889cdeded1ca41f1605bfff497a7ad_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.2MB
- SHA256 6fd26d4e52eb807cdc78f2b473a5ad587ac6ce57a9c9dec01c4f78de812d2828
- MD5 74889cdeded1ca41f1605bfff497a7ad
- SHA1 080357fed9d11c2c8e5cb9c363667a497e2be780
- SHA512 004fda256a681e91c10632147ddeed2a59e9f1a1e6fb0159b8ad1dbddc7e4eeabfbec6ee36f4075d5c56c5ef1e32f18c1668224c4e0163284dc088911d0a32ba
- SSDEEP 49152:yPZUsWq86hVJ2HiYx3KNRIbXmYv5WhuC2nUcsV6miMyQzT3QhCDmg27RnWGj:H5b20nMkXXCD527BWG
- TLSH T105167B57E6B940E9D0BAD139CA979617FAB2781A873197CB0790471A1F237F09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1