08e25d850a33314669d27d15e23d1a035c3a692589608e7f8a2fc98a2689fc6a

Resubmissions

07/08/2026, 07:13

260807-h2gsfazbrg10

06/08/2026, 15:04

260806-sfkmbatfmg3

05/07/2026, 10:09

260705-l6ytasbx3v8

05/07/2026, 10:06

260705-l5cvfabw8110

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_c027f9f4f88f8148b86e6a79f276f8cb_cobalt-strike_icedid_njrat_satacom_stealc
Size 2.3MB
Sample260705-l6ytasbx3v
SHA256 08e25d850a33314669d27d15e23d1a035c3a692589608e7f8a2fc98a2689fc6a
MD5 c027f9f4f88f8148b86e6a79f276f8cb
SHA1 a6b59bf0da82211def7494052086471f5603d306
SHA512 87144bec4ad1978cd60a45cc54e2917847b57495dd847304b4795c2eefff2ac4b20f380dc98aa4708b96658c1a105d7b2b9000197ec39adf89e4b2f8dd7e7994
SSDEEP 49152:7gNIrBCJyFPoT9AUeWWEcklTk5ULxg4XAnaWr:7FAT9Be5exg4c
TLSH
T196B5D01AA2F802FDD0B7D274C9469903EBB1784A13349AEF13D58D952F23A716E7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  2026-07-05_c027f9f4f88f8148b86e6a79f276f8cb_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.3MB
- SHA256 08e25d850a33314669d27d15e23d1a035c3a692589608e7f8a2fc98a2689fc6a
- MD5 c027f9f4f88f8148b86e6a79f276f8cb
- SHA1 a6b59bf0da82211def7494052086471f5603d306
- SHA512 87144bec4ad1978cd60a45cc54e2917847b57495dd847304b4795c2eefff2ac4b20f380dc98aa4708b96658c1a105d7b2b9000197ec39adf89e4b2f8dd7e7994
- SSDEEP 49152:7gNIrBCJyFPoT9AUeWWEcklTk5ULxg4XAnaWr:7FAT9Be5exg4c
- TLSH
  T196B5D01AA2F802FDD0B7D274C9469903EBB1784A13349AEF13D58D952F23A716E7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2