General
- Target 2026-06-27_d1d61111f336dfeccb0cae0e8d5b45b8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1010KB
- Sample260629-c4v5ysbv4w
- SHA256 c82895eb0977e18788521b685dd801f02ebcb7d109e40ed552683f095a139712
- MD5 d1d61111f336dfeccb0cae0e8d5b45b8
- SHA1 7be1c87d20a0fc857760005461ef561085e81e56
- SHA512 d26d8bcdfee1946b10dc620532e4b7fa943b15b52287e55ad39663699442ffee5d03deb3dc8d5e06dd9ea405293b4f0427cc754bcaa28b3c0873c6989f6a376f
- SSDEEP 12288:mGqvDkOfJQJ/8m9xnI4RhpoIuxi0pbB8RCSbRYi9n5b9Y6PEQRDsgwf:HqNfiFLnnXRhpoIG1B8R4i9n5b9Ys6f
- TLSH T1D7256A41B6AC01AFC33781394696A51BEA353C0D33205EEB739C165C2F7B6E35ABA351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d1d61111f336dfeccb0cae0e8d5b45b8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d1d61111f336dfeccb0cae0e8d5b45b8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d1d61111f336dfeccb0cae0e8d5b45b8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1010KB
- SHA256 c82895eb0977e18788521b685dd801f02ebcb7d109e40ed552683f095a139712
- MD5 d1d61111f336dfeccb0cae0e8d5b45b8
- SHA1 7be1c87d20a0fc857760005461ef561085e81e56
- SHA512 d26d8bcdfee1946b10dc620532e4b7fa943b15b52287e55ad39663699442ffee5d03deb3dc8d5e06dd9ea405293b4f0427cc754bcaa28b3c0873c6989f6a376f
- SSDEEP 12288:mGqvDkOfJQJ/8m9xnI4RhpoIuxi0pbB8RCSbRYi9n5b9Y6PEQRDsgwf:HqNfiFLnnXRhpoIG1B8R4i9n5b9Ys6f
- TLSH T1D7256A41B6AC01AFC33781394696A51BEA353C0D33205EEB739C165C2F7B6E35ABA351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Disables Task Manager via registry modification
Event Triggered Execution: Image File Execution Options Injection
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1