General
- Target 2026-06-28_ef350d42be8995f025efdc1743e42222_cobalt-strike_icedid_satacom
- Size 18.7MB
- Sample260628-wpfw9sbt3q
- SHA256 e271f4bc01752a49c5ff886deff49d93aaacd7344ed41523aa533e0976c70968
- MD5 ef350d42be8995f025efdc1743e42222
- SHA1 b6148365ffd57ff216238b8fa399f0fae39feca8
- SHA512 b393d3fec56c5e2992c7e79de909c2494dfbf9e43f4f4397d6848aa36da456d7b2fff5d136898c8491964ed06fc99ebbb05cd55c7f9c4dca2d5edaaffc5938b9
- SSDEEP 393216:w/p8KUaeZynkxN4S3MTgwlkEWNtvMSD86yt+xDJqIUK:w/pKN44FE+tvM489+DqIUK
- TLSH T13C1723D62AE831B4D0E3CB31A687834E7482729956BE1E1F3DC41C021715DAB6A4FB77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_ef350d42be8995f025efdc1743e42222_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_ef350d42be8995f025efdc1743e42222_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_ef350d42be8995f025efdc1743e42222_cobalt-strike_icedid_satacom
- Size 18.7MB
- SHA256 e271f4bc01752a49c5ff886deff49d93aaacd7344ed41523aa533e0976c70968
- MD5 ef350d42be8995f025efdc1743e42222
- SHA1 b6148365ffd57ff216238b8fa399f0fae39feca8
- SHA512 b393d3fec56c5e2992c7e79de909c2494dfbf9e43f4f4397d6848aa36da456d7b2fff5d136898c8491964ed06fc99ebbb05cd55c7f9c4dca2d5edaaffc5938b9
- SSDEEP 393216:w/p8KUaeZynkxN4S3MTgwlkEWNtvMSD86yt+xDJqIUK:w/pKN44FE+tvM489+DqIUK
- TLSH T13C1723D62AE831B4D0E3CB31A687834E7482729956BE1E1F3DC41C021715DAB6A4FB77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.