General
- Target 2026-05-16_4ff19aa2de5989a33488664414c31f6a_cobalt-strike_icedid_satacom_stealc
- Size 283KB
- Sample260516-sc787sfs2x
- SHA256 55f222ef3eb68e97b848a068e518d2904f4c72545681f56b5a1a918a731fdb41
- MD5 4ff19aa2de5989a33488664414c31f6a
- SHA1 7f37422ff8ca06c5b3ba1b2c58d3f3d77317ae34
- SHA512 cce5f4a382a9ccca1d56ea661ba1e94570242eec5a57aa9ec528ceed48a18379fa38bc08cc0479158012257f9e91e7a3cee5a11ad85e5028bc55e5d13cc32f33
- SSDEEP 3072:Mrf1BJgAG6h9OZwsl9nRQoohpZ/7NQWx8kH9rdV8JfFrOrVALz2vBisn65t+iCzz:ML1BzG6h90nZsB/76WxZpJrVrOn3vjy
- TLSH T1FB548D19B66418FDEABBC17DCD424906EB72BC9243B1E65F13D04BA61F236A08D3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-16_4ff19aa2de5989a33488664414c31f6a_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_4ff19aa2de5989a33488664414c31f6a_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_4ff19aa2de5989a33488664414c31f6a_cobalt-strike_icedid_satacom_stealc
- Size 283KB
- SHA256 55f222ef3eb68e97b848a068e518d2904f4c72545681f56b5a1a918a731fdb41
- MD5 4ff19aa2de5989a33488664414c31f6a
- SHA1 7f37422ff8ca06c5b3ba1b2c58d3f3d77317ae34
- SHA512 cce5f4a382a9ccca1d56ea661ba1e94570242eec5a57aa9ec528ceed48a18379fa38bc08cc0479158012257f9e91e7a3cee5a11ad85e5028bc55e5d13cc32f33
- SSDEEP 3072:Mrf1BJgAG6h9OZwsl9nRQoohpZ/7NQWx8kH9rdV8JfFrOrVALz2vBisn65t+iCzz:ML1BzG6h90nZsB/76WxZpJrVrOn3vjy
- TLSH T1FB548D19B66418FDEABBC17DCD424906EB72BC9243B1E65F13D04BA61F236A08D3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.