General
- Target 2026-06-30_d817426ee71c7c6a9a686759fb69c122_cobalt-strike_icedid_satacom
- Size 17.8MB
- Sample260630-wrh5eaew7s
- SHA256 d7c097eda7ecd5fb61cabcc5edd88030b16ab262a57814047dd5bbe2a697d43d
- MD5 d817426ee71c7c6a9a686759fb69c122
- SHA1 e8879259aa67fbb76fd6502cd3d7e14dd2c2b3c0
- SHA512 a57de178517a98d0d9113b9a57689f167292102cdc0c168028f8022d3d5fe28104724eb7d95177967a4fc6a1fcff5dd7907c94dec6eef92b6c3e262fd149dcb1
- SSDEEP 196608:BTxY+zpOOnItlbLipC05+PCdqSO4210SVDmyv0clKt5eQz:BFY+9OpNPC0h10IlK
- TLSH T13817330E850924F2FF6936B4CBE0D0DBA3E748909F57DD9F8726F09DA70E4969132A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_d817426ee71c7c6a9a686759fb69c122_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
overlord
C2
-
31.57.219.155:5173
Targets
-
- Target 2026-06-30_d817426ee71c7c6a9a686759fb69c122_cobalt-strike_icedid_satacom
- Size 17.8MB
- SHA256 d7c097eda7ecd5fb61cabcc5edd88030b16ab262a57814047dd5bbe2a697d43d
- MD5 d817426ee71c7c6a9a686759fb69c122
- SHA1 e8879259aa67fbb76fd6502cd3d7e14dd2c2b3c0
- SHA512 a57de178517a98d0d9113b9a57689f167292102cdc0c168028f8022d3d5fe28104724eb7d95177967a4fc6a1fcff5dd7907c94dec6eef92b6c3e262fd149dcb1
- SSDEEP 196608:BTxY+zpOOnItlbLipC05+PCdqSO4210SVDmyv0clKt5eQz:BFY+9OpNPC0h10IlK
- TLSH T13817330E850924F2FF6936B4CBE0D0DBA3E748909F57DD9F8726F09DA70E4969132A50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
Executes dropped EXE