bb722fab14b0236deed29b2da4556b404c117e7a80df4c8a1ff627725d436e95

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 15:59

Target
2026-07-05_a3d29c678c8ca6a123762bbabb4f378c_cobalt-strike_icedid_satacom_stealc.exe
Size 416KB
Sample260705-tfc3xahs9j
SHA256 bb722fab14b0236deed29b2da4556b404c117e7a80df4c8a1ff627725d436e95
MD5 a3d29c678c8ca6a123762bbabb4f378c
SHA1 4392e4aa71eb4942b079fd5d29029a92c5041174
SHA512 ba1ae0571790202c5ca77e0d9e2cb5ba303d81174e6d99c0cb1d2f1db933831a6d825040fd44848abaf92c960b96fed8ae3ebb5276f165474c16de762618c523
SSDEEP 6144:AT/s5BBuEKB55PMncRz/smiTVVmVVV8VVNVVVcVVVxVVVPVVlVVVRVVVtVVWV60S:8snBuEa+nez/W
TLSH
T1DD944B42DF9814DBDC368A34D1B0A6599A37B8D0A7949FDF12683D2E7D12BC09C3A734
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\System32\conig\OSDATA	2026-07-05_a3d29c678c8ca6a123762bbabb4f378c_cobalt-strike_icedid_satacom_stealc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2026-07-05_a3d29c678c8ca6a123762bbabb4f378c_cobalt-strike_icedid_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-05_a3d29c678c8ca6a123762bbabb4f378c_cobalt-strike_icedid_satacom_stealc.exe"
1⤵
- Drops file in System32 directory
PID:4808

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact