General
- Target 2026-07-01_eabb38470f1111828e4668ac0cd222f8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.0MB
- Sample260701-wrpxysds7x
- SHA256 f9225d972bccab32552c10610bb4b927ae71bf7b370fd6dc83363cd156147713
- MD5 eabb38470f1111828e4668ac0cd222f8
- SHA1 acbb41f377d5bc0b08ead7fa206043e5e2998de6
- SHA512 9193a79be34bc4df253da3494c379449983f64b9fa6ca438671d98fba119d2328df7b9e893c1a9e0387d1bb328415687e4963757e118171f48676fd234c29822
- SSDEEP 12288:oenuFOJPpQYuS8PsVIPbpQ42VnYKjMgXz7RtZRFcwYe2wPArGPPOGzJFJdX3eLhH:oenuFOJqY98jAP5NX2hjirzI
- TLSH T1D5353A266AAC00BCD272D5F9CF365943D2B2748A03347DEF07D069B21E175D89A7AF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_eabb38470f1111828e4668ac0cd222f8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_eabb38470f1111828e4668ac0cd222f8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_eabb38470f1111828e4668ac0cd222f8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.0MB
- SHA256 f9225d972bccab32552c10610bb4b927ae71bf7b370fd6dc83363cd156147713
- MD5 eabb38470f1111828e4668ac0cd222f8
- SHA1 acbb41f377d5bc0b08ead7fa206043e5e2998de6
- SHA512 9193a79be34bc4df253da3494c379449983f64b9fa6ca438671d98fba119d2328df7b9e893c1a9e0387d1bb328415687e4963757e118171f48676fd234c29822
- SSDEEP 12288:oenuFOJPpQYuS8PsVIPbpQ42VnYKjMgXz7RtZRFcwYe2wPArGPPOGzJFJdX3eLhH:oenuFOJqY98jAP5NX2hjirzI
- TLSH T1D5353A266AAC00BCD272D5F9CF365943D2B2748A03347DEF07D069B21E175D89A7AF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.