f042fd016329633da5f2f51e3c47ea4c4a539bf48ff736ceeaa2f545ec38fb6f

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 01:47

Target
2026-07-05_2506fe41dcc2c87cce1e3df7a456f21a_cobalt-strike_icedid_satacom.exe
Size 3.5MB
Sample260705-b7271agt61
SHA256 f042fd016329633da5f2f51e3c47ea4c4a539bf48ff736ceeaa2f545ec38fb6f
MD5 2506fe41dcc2c87cce1e3df7a456f21a
SHA1 c146022349c526f0120194a2a46014e247192ce5
SHA512 ef47436a542aca4fe9d10107c871b07bc539dea0d2abff797a2305f36aed17c06a7294b8b39633149b3a9b807ddd34aa19b157823478f835f8d173dd983ce339
SSDEEP 98304:KhOB5GK8+rHqJO9QA30h9amTYBBHehfRYm:Kh3wHq3A3A9abTHWqm
TLSH
T16506336C52A876E4C67B927486034256977BBD330B436BDF17E08A580F778C92C35E36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3104	2026-07-05_2506fe41dcc2c87cce1e3df7a456f21a_cobalt-strike_icedid_satacom.exe
3104	2026-07-05_2506fe41dcc2c87cce1e3df7a456f21a_cobalt-strike_icedid_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-05_2506fe41dcc2c87cce1e3df7a456f21a_cobalt-strike_icedid_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-05_2506fe41dcc2c87cce1e3df7a456f21a_cobalt-strike_icedid_satacom.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3104