General
- Target 2026-07-01_0a01836e9a0a9a9e6c99431ff4eeaa16_cobalt-strike_icedid_njrat_satacom_stealc
- Size 334KB
- Sample260702-atkv5agy5p
- SHA256 755d2eb41f5361e2b8c386b2bcc81aabc519bfb2ca58b1dfad68d580183ddcea
- MD5 0a01836e9a0a9a9e6c99431ff4eeaa16
- SHA1 ba7a42b9414aed7c0c14b9507cf18e90eb269de0
- SHA512 6b62db6ea9bb78bc8f0490d3297717f5a2aec89615d3196a79ecfda19048cd67d25f3c190ed6c10901e36ce410c580f8fae846b6b1c2245f148d7cd67e596be4
- SSDEEP 3072:ArpMM6xrdUa09f4ua0w/YlJE1X6P9MufHpNIkOFHm820mCTBdkV90KQpvoiLam0J:GEWzMxFG82zG+6Rsz8LVFFrkps4
- TLSH T186744C4AFAA524F5E5BBC13CC542550AFAB13C6243709BCB67904A572F23BE4AE3D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_0a01836e9a0a9a9e6c99431ff4eeaa16_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0a01836e9a0a9a9e6c99431ff4eeaa16_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0a01836e9a0a9a9e6c99431ff4eeaa16_cobalt-strike_icedid_njrat_satacom_stealc
- Size 334KB
- SHA256 755d2eb41f5361e2b8c386b2bcc81aabc519bfb2ca58b1dfad68d580183ddcea
- MD5 0a01836e9a0a9a9e6c99431ff4eeaa16
- SHA1 ba7a42b9414aed7c0c14b9507cf18e90eb269de0
- SHA512 6b62db6ea9bb78bc8f0490d3297717f5a2aec89615d3196a79ecfda19048cd67d25f3c190ed6c10901e36ce410c580f8fae846b6b1c2245f148d7cd67e596be4
- SSDEEP 3072:ArpMM6xrdUa09f4ua0w/YlJE1X6P9MufHpNIkOFHm820mCTBdkV90KQpvoiLam0J:GEWzMxFG82zG+6Rsz8LVFFrkps4
- TLSH T186744C4AFAA524F5E5BBC13CC542550AFAB13C6243709BCB67904A572F23BE4AE3D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.