Overview

overview

10

Static

static

10

2026-06-01...om.exe

windows10-2004-x64

1

2026-06-01...om.exe

windows11-21h2-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    98s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    01/06/2026, 12:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-01_c653deb9b55521585c0e26f38ab1b85d_cobalt-strike_icedid_njrat_satacom.exe
  • Size 1.5MB
  • Sample260601-phstxsbv4x
  • SHA256 589549f47cf5eb878af4e61eabd31d99b57b36a2e359051902a352cce61cf179
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-01_c653deb9b55521585c0e26f38ab1b85d_cobalt-strike_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-01_c653deb9b55521585c0e26f38ab1b85d_cobalt-strike_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3668
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:2636
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:3428
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
            PID:2360
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:4028
          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
            1⤵
              PID:1652

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1024B
                  • SHA256 bb99ba90e384683b5cb4a6d50d0038c40412b9f161fadc3365b9c4f7c70f52dc
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 cbc63ab87c1067031df2bea1ff5ebf1a2a2a3fdf3cea05fbc9545304d3167001
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 04b525a11fde7fa967788156068535726a7970906e1277a8365c094b30d64310
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 5d50172ae17fa50ad6e1f9e3e5760b45750b91caba15dece7be8f7191fef8b16
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 477B
                  • SHA256 e64edb6fd249ea548278cc829788d5dc1d230de12584458b8a1e653f6992adf9
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 551B
                  • SHA256 268f93b91edc381ef18eace124a187f649888df2b75976129df315f7d65f0896
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download