General
- Target 2026-06-27_9cad65fc173a92eff10cf4fb559a5c2f_cobalt-strike_icedid_njrat_satacom_stealc
- Size 690KB
- Sample260629-e9wd1sev3q
- SHA256 6576ce1d853bce75bd1e75c8ac8d46f322da817fabdcae3dc115cdeb5ad09ea2
- MD5 9cad65fc173a92eff10cf4fb559a5c2f
- SHA1 c75d1591fe5e1eb2c7ed35bc6653624a76b29ea2
- SHA512 bc4514157b6e369196932d6a4d72d1f5671e00fbfe1fc771c07ddfa88bd4415c3c69c70578bcfc7a34aab486862363a8ed0b3732fb9e5eb8308bc709aa1e603c
- SSDEEP 12288:3CGpZrWt/ecrNnJ4BTJonlrCy3GHWsUs6/n/5jy44lM+WD8rgI4cKGedihyg4bn0:3CGpZrWt/eaNnJ4BTJonlrCy22sUs6/W
- TLSH T1E4E45B26A66C01FCE1B7C1788D525902F6F57C8B03719FEF13901DB61E1B6D4AA7AB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_9cad65fc173a92eff10cf4fb559a5c2f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_9cad65fc173a92eff10cf4fb559a5c2f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_9cad65fc173a92eff10cf4fb559a5c2f_cobalt-strike_icedid_njrat_satacom_stealc
- Size 690KB
- SHA256 6576ce1d853bce75bd1e75c8ac8d46f322da817fabdcae3dc115cdeb5ad09ea2
- MD5 9cad65fc173a92eff10cf4fb559a5c2f
- SHA1 c75d1591fe5e1eb2c7ed35bc6653624a76b29ea2
- SHA512 bc4514157b6e369196932d6a4d72d1f5671e00fbfe1fc771c07ddfa88bd4415c3c69c70578bcfc7a34aab486862363a8ed0b3732fb9e5eb8308bc709aa1e603c
- SSDEEP 12288:3CGpZrWt/ecrNnJ4BTJonlrCy3GHWsUs6/n/5jy44lM+WD8rgI4cKGedihyg4bn0:3CGpZrWt/eaNnJ4BTJonlrCy22sUs6/W
- TLSH T1E4E45B26A66C01FCE1B7C1788D525902F6F57C8B03719FEF13901DB61E1B6D4AA7AB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.