General
- Target 2026-07-02_7bb21233f3078d4c96e3c20eb84ff5c0_cobalt-strike_icedid_satacom
- Size 98KB
- Sample260702-gyn7nsay4n
- SHA256 0aea1ba0d7db624a209ad199f341a160e3104885793cb0121df83e44913314d9
- MD5 7bb21233f3078d4c96e3c20eb84ff5c0
- SHA1 a0b7506b5dd7d06047f2d5086f75422f6e6a1bb0
- SHA512 6a9b120a82742ef2d2416c140dac1e8a5ad31f41f29473402e90ef374f2d4346a1a4f2b9d12a824ab6c8f2d7a2761f5a7ece1f060cc13569d5a00be89c7967f3
- SSDEEP 3072:fzMrp20uCeqFnER57cAdq2MIeqVP3kOs6Hf:f4TeqFnEldq2xbm
- TLSH T1A9A33957B3E531F9E2B68A3984A50A05E776F83107619FEF03A042561F273E58D3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_7bb21233f3078d4c96e3c20eb84ff5c0_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_7bb21233f3078d4c96e3c20eb84ff5c0_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_7bb21233f3078d4c96e3c20eb84ff5c0_cobalt-strike_icedid_satacom
- Size 98KB
- SHA256 0aea1ba0d7db624a209ad199f341a160e3104885793cb0121df83e44913314d9
- MD5 7bb21233f3078d4c96e3c20eb84ff5c0
- SHA1 a0b7506b5dd7d06047f2d5086f75422f6e6a1bb0
- SHA512 6a9b120a82742ef2d2416c140dac1e8a5ad31f41f29473402e90ef374f2d4346a1a4f2b9d12a824ab6c8f2d7a2761f5a7ece1f060cc13569d5a00be89c7967f3
- SSDEEP 3072:fzMrp20uCeqFnER57cAdq2MIeqVP3kOs6Hf:f4TeqFnEldq2xbm
- TLSH T1A9A33957B3E531F9E2B68A3984A50A05E776F83107619FEF03A042561F273E58D3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.