General
- Target 2026-07-05_7653df7c87495b06e250105dc0c8d805_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.1MB
- Sample260705-3dp45ags7s
- SHA256 486e4b6e2db2c3b47fd40534d070914294efe4babe51797e2aeec18d30fe7349
- MD5 7653df7c87495b06e250105dc0c8d805
- SHA1 9eb2030784fb564a7a79b04de1f4371f1cab81a9
- SHA512 be880b2cf122e9839d6d6cc0093bbcb0c67c0b36f290a20c4a203c4406964131809b318c36e9be8c245e7ee7dbf8502d01d7be290394e748619dab44bdeeec49
- SSDEEP 12288:7illXINSbYxwDiCrnOuqNDexx1ughJab15pvD/Bs7w5I0061mJr6tNLS099gPa:mz4SXDiCriNDafvJaF7B5Iq1eOaP
- TLSH T1AD358D16B3A840BCF427C274CA465607EBF2B45623709ACF5794DEAA2F33A71563E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-05_7653df7c87495b06e250105dc0c8d805_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_7653df7c87495b06e250105dc0c8d805_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_7653df7c87495b06e250105dc0c8d805_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.1MB
- SHA256 486e4b6e2db2c3b47fd40534d070914294efe4babe51797e2aeec18d30fe7349
- MD5 7653df7c87495b06e250105dc0c8d805
- SHA1 9eb2030784fb564a7a79b04de1f4371f1cab81a9
- SHA512 be880b2cf122e9839d6d6cc0093bbcb0c67c0b36f290a20c4a203c4406964131809b318c36e9be8c245e7ee7dbf8502d01d7be290394e748619dab44bdeeec49
- SSDEEP 12288:7illXINSbYxwDiCrnOuqNDexx1ughJab15pvD/Bs7w5I0061mJr6tNLS099gPa:mz4SXDiCriNDafvJaF7B5Iq1eOaP
- TLSH T1AD358D16B3A840BCF427C274CA465607EBF2B45623709ACF5794DEAA2F33A71563E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.