General
- Target 2026-06-02_215c779d827bafe038add9ad92814105_cobalt-strike_icedid_njrat_satacom_stealc
- Size 20.0MB
- Sample260602-sbm7msgs8t
- SHA256 718c60c1639d39467c7c03545b628662da722b792706eb4ab9e064220f7e8d44
- MD5 215c779d827bafe038add9ad92814105
- SHA1 5c77035164e3404b0da7a0902fb55c06fa7b2914
- SHA512 116a2248625fa758d2422b5268a49ab6ddaeab12648265a673aa47c13efadc7a038ecd14a46c85ba164d1a2c0911ea2b7215ac851dcc30add89105fd62af0a9c
- SSDEEP 393216:dYSg3iFAO7lpHxM62CvsZmdltWOUFXiATNL3KhG5Yryx8Br8FC:dVHAOJpH66bUMLtWFXiax6hGGroW8F
- TLSH T1C32712029EC452BAE8378134CB9703C7C9BD7954473185DBEFA506142A779F218FEBA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_215c779d827bafe038add9ad92814105_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_215c779d827bafe038add9ad92814105_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_215c779d827bafe038add9ad92814105_cobalt-strike_icedid_njrat_satacom_stealc
- Size 20.0MB
- SHA256 718c60c1639d39467c7c03545b628662da722b792706eb4ab9e064220f7e8d44
- MD5 215c779d827bafe038add9ad92814105
- SHA1 5c77035164e3404b0da7a0902fb55c06fa7b2914
- SHA512 116a2248625fa758d2422b5268a49ab6ddaeab12648265a673aa47c13efadc7a038ecd14a46c85ba164d1a2c0911ea2b7215ac851dcc30add89105fd62af0a9c
- SSDEEP 393216:dYSg3iFAO7lpHxM62CvsZmdltWOUFXiATNL3KhG5Yryx8Br8FC:dVHAOJpH66bUMLtWFXiax6hGGroW8F
- TLSH T1C32712029EC452BAE8378134CB9703C7C9BD7954473185DBEFA506142A779F218FEBA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1