General
- Target 2026-04-19_0db6955e30676eb7d42d919027e3faf4_cobalt-strike_hawkeye_icedid_remcos_satacom_stop
- Size 2.0MB
- Sample260419-2bttvsaz7m
- SHA256 240d857a791765d407431803a5157a03e26126ac53d17d659c7ba0368ffa7df4
- MD5 0db6955e30676eb7d42d919027e3faf4
- SHA1 e7c24bc953204a2efee80a82da3aac8f4d93151a
- SHA512 bcb3e05b2405f9fadcd4eea63e2d2913af04a3fdbdeab572c44f0583e5d35aa33847016a31b8c19afca67db53dfe51f8016ccfdbcdff30d1b1c9ca840f287339
- SSDEEP 24576:/jOj249H67pbdAhYJjOj249H67pbdAhY8afDd70iTWC7:X4p67pbdT4p67pbdlDd79WC7
- TLSH T186A5E60177E59035F1B21A309A76961D5A66BC61DE378E4F23841ECDFFF0A909A34B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_0db6955e30676eb7d42d919027e3faf4_cobalt-strike_hawkeye_icedid_remcos_satacom_stop.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_0db6955e30676eb7d42d919027e3faf4_cobalt-strike_hawkeye_icedid_remcos_satacom_stop.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_0db6955e30676eb7d42d919027e3faf4_cobalt-strike_hawkeye_icedid_remcos_satacom_stop
- Size 2.0MB
- SHA256 240d857a791765d407431803a5157a03e26126ac53d17d659c7ba0368ffa7df4
- MD5 0db6955e30676eb7d42d919027e3faf4
- SHA1 e7c24bc953204a2efee80a82da3aac8f4d93151a
- SHA512 bcb3e05b2405f9fadcd4eea63e2d2913af04a3fdbdeab572c44f0583e5d35aa33847016a31b8c19afca67db53dfe51f8016ccfdbcdff30d1b1c9ca840f287339
- SSDEEP 24576:/jOj249H67pbdAhYJjOj249H67pbdAhY8afDd70iTWC7:X4p67pbdT4p67pbdlDd79WC7
- TLSH T186A5E60177E59035F1B21A309A76961D5A66BC61DE378E4F23841ECDFFF0A909A34B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.