General
- Target 2026-06-28_4be91d2c9205ebe5746f6a0ff7fcb6d0_cobalt-strike_icedid_satacom
- Size 17.8MB
- Sample260628-2rjc3afy6t
- SHA256 f461c95aa33b44c7fad95774705f8b6580403d7f18215d60a1bd5b63bcd95f16
- MD5 4be91d2c9205ebe5746f6a0ff7fcb6d0
- SHA1 4d6a688002a239171cb8ccfa2e451771491e5c6b
- SHA512 6f70b7b100729bea2a049c039bed3cddb533249e37b855516b131255cf2b98595838fb53cd1233bfcc5b7bc7874271da5c193d6d3055921216ab27c567a1c5b6
- SSDEEP 196608:Mauu9W4Yv5giJfg0YDHELmPmewTpKfgO1FVm+66MiT:yP5zg0skL+ydO1mD
- TLSH T11F1733D1610FEBF8EA0926B598E18063FBDE3DAD85756FCB798810D50EA414C9E38317
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_4be91d2c9205ebe5746f6a0ff7fcb6d0_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
overlord
C2
-
31.57.219.155:5173
Targets
-
- Target 2026-06-28_4be91d2c9205ebe5746f6a0ff7fcb6d0_cobalt-strike_icedid_satacom
- Size 17.8MB
- SHA256 f461c95aa33b44c7fad95774705f8b6580403d7f18215d60a1bd5b63bcd95f16
- MD5 4be91d2c9205ebe5746f6a0ff7fcb6d0
- SHA1 4d6a688002a239171cb8ccfa2e451771491e5c6b
- SHA512 6f70b7b100729bea2a049c039bed3cddb533249e37b855516b131255cf2b98595838fb53cd1233bfcc5b7bc7874271da5c193d6d3055921216ab27c567a1c5b6
- SSDEEP 196608:Mauu9W4Yv5giJfg0YDHELmPmewTpKfgO1FVm+66MiT:yP5zg0skL+ydO1mD
- TLSH T11F1733D1610FEBF8EA0926B598E18063FBDE3DAD85756FCB798810D50EA414C9E38317
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
Executes dropped EXE