General
- Target 2026-07-02_9983b7d029578f0d32d14a8a343d039b_cobalt-strike_icedid_satacom
- Size 153KB
- Sample260702-3scscads7l
- SHA256 72dab48fd8f0628bb136e7ce25a116ba79c56b3776e9890b8f71c922a4b9fa56
- MD5 9983b7d029578f0d32d14a8a343d039b
- SHA1 4727dcc3c490618bb363f206f9c27c8714b54866
- SHA512 1345e1fe80d7e3d6d40a4fbfc3ede6cdde9899bc345a9daa7d2152881c72bcc1dcb3172bef5ae77f20d2e0410231a7c8545aefc37bdd4babfd32b25b9ed1b9ee
- SSDEEP 3072:fzLqYQ3HMO83sFgfvxnSj3xCq1wybDtvtsOinobDq:fW3H43sWxSjNZJ1sVo
- TLSH T18EE39E5BB3A534F9D177863884615945E7B6B8320720AFFF03A4425A2F376D09E3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_9983b7d029578f0d32d14a8a343d039b_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_9983b7d029578f0d32d14a8a343d039b_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_9983b7d029578f0d32d14a8a343d039b_cobalt-strike_icedid_satacom
- Size 153KB
- SHA256 72dab48fd8f0628bb136e7ce25a116ba79c56b3776e9890b8f71c922a4b9fa56
- MD5 9983b7d029578f0d32d14a8a343d039b
- SHA1 4727dcc3c490618bb363f206f9c27c8714b54866
- SHA512 1345e1fe80d7e3d6d40a4fbfc3ede6cdde9899bc345a9daa7d2152881c72bcc1dcb3172bef5ae77f20d2e0410231a7c8545aefc37bdd4babfd32b25b9ed1b9ee
- SSDEEP 3072:fzLqYQ3HMO83sFgfvxnSj3xCq1wybDtvtsOinobDq:fW3H43sWxSjNZJ1sVo
- TLSH T18EE39E5BB3A534F9D177863884615945E7B6B8320720AFFF03A4425A2F376D09E3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.