General
- Target 2026-07-05_f8aac82dbc279da26c051f893c139b4f_cobalt-strike_icedid_satacom
- Size 3.5MB
- Sample260705-m32w8afw7p
- SHA256 2f97e04a36b5c0df8ef97d2ca83fa19a82370dfe1f59b95654c626e42782845c
- MD5 f8aac82dbc279da26c051f893c139b4f
- SHA1 2a60fe22b364a4b4e92a8cb2b39c5d08dbad7fd9
- SHA512 eba0125e8957705de586b7f35e7375844506ab83c5010ec3e123fbe6b2e26a347b32bdb8b5c4bd03ae27cefe08abdbc46652f9bb3713bfc59aea244638e154d8
- SSDEEP 49152:LAOtJINrjifin0OEh5ooyIZy0i+SWvmMMC47JDps+KAZs65+Dace3rG2qRrPlkGH:0eBK+h5oeBidPpjs+Kml5H3aFrrD
- TLSH T1EF063389F3FEB5F5D1A2903495D28682A75BF67203001AFF474402162D7BAD24F7DA36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_f8aac82dbc279da26c051f893c139b4f_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_f8aac82dbc279da26c051f893c139b4f_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_f8aac82dbc279da26c051f893c139b4f_cobalt-strike_icedid_satacom
- Size 3.5MB
- SHA256 2f97e04a36b5c0df8ef97d2ca83fa19a82370dfe1f59b95654c626e42782845c
- MD5 f8aac82dbc279da26c051f893c139b4f
- SHA1 2a60fe22b364a4b4e92a8cb2b39c5d08dbad7fd9
- SHA512 eba0125e8957705de586b7f35e7375844506ab83c5010ec3e123fbe6b2e26a347b32bdb8b5c4bd03ae27cefe08abdbc46652f9bb3713bfc59aea244638e154d8
- SSDEEP 49152:LAOtJINrjifin0OEh5ooyIZy0i+SWvmMMC47JDps+KAZs65+Dace3rG2qRrPlkGH:0eBK+h5oeBidPpjs+Kml5H3aFrrD
- TLSH T1EF063389F3FEB5F5D1A2903495D28682A75BF67203001AFF474402162D7BAD24F7DA36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.