General
- Target 2026-06-26_4fa6a174134543959a1a7fe4d32d16f4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.1MB
- Sample260629-tk1d1aaz7l
- SHA256 614cebfec9dc7d3fce7e3f48728741abdd9bd1b6728f5bb946766bb440fcfcb7
- MD5 4fa6a174134543959a1a7fe4d32d16f4
- SHA1 6101958359e08fbe59c23c31abdceeb359f7ce40
- SHA512 24ec8daee783c2f3315cd6c708e6483f12607e1ce311b06b6fc7e2296d402275fa85a402de36edb380963a81a1f8f922ee1a0d0464d1f8f5fc154c1381f66e23
- SSDEEP 12288:HAK6Wvzg862NeE224kYgRhb2Q8FsjdlBsMkttlprDmBbQQxbDJSbRmb4+bjb5OP4:XDvzF6am24QR9pUwh0wh0wh
- TLSH T1DF45D7154AA8F1C7F3558CB4D071CA6E85BD7D310E65415322FB9FEEBE2EB186821322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-26_4fa6a174134543959a1a7fe4d32d16f4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_4fa6a174134543959a1a7fe4d32d16f4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_4fa6a174134543959a1a7fe4d32d16f4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.1MB
- SHA256 614cebfec9dc7d3fce7e3f48728741abdd9bd1b6728f5bb946766bb440fcfcb7
- MD5 4fa6a174134543959a1a7fe4d32d16f4
- SHA1 6101958359e08fbe59c23c31abdceeb359f7ce40
- SHA512 24ec8daee783c2f3315cd6c708e6483f12607e1ce311b06b6fc7e2296d402275fa85a402de36edb380963a81a1f8f922ee1a0d0464d1f8f5fc154c1381f66e23
- SSDEEP 12288:HAK6Wvzg862NeE224kYgRhb2Q8FsjdlBsMkttlprDmBbQQxbDJSbRmb4+bjb5OP4:XDvzF6am24QR9pUwh0wh0wh
- TLSH T1DF45D7154AA8F1C7F3558CB4D071CA6E85BD7D310E65415322FB9FEEBE2EB186821322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger