General
- Target 2026-06-28_516e10dd75e3523ea34732090e18537a_amadey_cobalt-strike_icedid_satacom
- Size 420KB
- Sample260628-2k5bysgv2r
- SHA256 3e70bdfeb18e40cf0202070b3d451802f610619c849d865222d2f26d83fc5629
- MD5 516e10dd75e3523ea34732090e18537a
- SHA1 98ea1bd75ca443230fc413c635310cca871d2d58
- SHA512 10f58bb63d4873e5f24cce0dff069d4efdce9d94d9084c7ab469071c1905a92da3c462913807babd7728cfda62121557c1274cc81cfed9b338c9e2dac133e519
- SSDEEP 6144:hXb64zvAWTndfKJnMOz52acsokWDWsfsnE9Q/ZEh53wPP2IgTg+UxqsLSk:hPUWmnToaczNUECEh53OwTg+SWk
- TLSH T1DA946D66F3A900F5E067C078C6925607FB76784A0325EBDF03A89A392F136E15D3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_516e10dd75e3523ea34732090e18537a_amadey_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_516e10dd75e3523ea34732090e18537a_amadey_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_516e10dd75e3523ea34732090e18537a_amadey_cobalt-strike_icedid_satacom
- Size 420KB
- SHA256 3e70bdfeb18e40cf0202070b3d451802f610619c849d865222d2f26d83fc5629
- MD5 516e10dd75e3523ea34732090e18537a
- SHA1 98ea1bd75ca443230fc413c635310cca871d2d58
- SHA512 10f58bb63d4873e5f24cce0dff069d4efdce9d94d9084c7ab469071c1905a92da3c462913807babd7728cfda62121557c1274cc81cfed9b338c9e2dac133e519
- SSDEEP 6144:hXb64zvAWTndfKJnMOz52acsokWDWsfsnE9Q/ZEh53wPP2IgTg+UxqsLSk:hPUWmnToaczNUECEh53OwTg+SWk
- TLSH T1DA946D66F3A900F5E067C078C6925607FB76784A0325EBDF03A89A392F136E15D3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.