General
- Target 2026-07-06_46225dff75df195d63981b8e95d89def_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260706-ql47ssfx4x
- SHA256 35b7a70043bea654a18ef9c8d84828adb85c25377547169bd8dc2c2c77476b23
- MD5 46225dff75df195d63981b8e95d89def
- SHA1 148ddf950e318e674d85f3d5790b5e931ca11034
- SHA512 698c38c1d72cb08b77d3acd0b3963c0679813a316ca9c0bd48282e90e16311a9641e829b0383285f2d11ada32b591a665d457985e4905a659b401bec1dc2643b
- SSDEEP 24576:VdUwizp/Gmf0UWdtgzt6/JK4EwGzX+UbjeuR7YwL:VdUp/Gmf0UW06/JK4QtHeuR7Y
- TLSH T14D753A0EEAB582E5D0BAD078C652B52BFC7134AA83305BE356919B572F237E4D93D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_46225dff75df195d63981b8e95d89def_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_46225dff75df195d63981b8e95d89def_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_46225dff75df195d63981b8e95d89def_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 35b7a70043bea654a18ef9c8d84828adb85c25377547169bd8dc2c2c77476b23
- MD5 46225dff75df195d63981b8e95d89def
- SHA1 148ddf950e318e674d85f3d5790b5e931ca11034
- SHA512 698c38c1d72cb08b77d3acd0b3963c0679813a316ca9c0bd48282e90e16311a9641e829b0383285f2d11ada32b591a665d457985e4905a659b401bec1dc2643b
- SSDEEP 24576:VdUwizp/Gmf0UWdtgzt6/JK4EwGzX+UbjeuR7YwL:VdUp/Gmf0UW06/JK4QtHeuR7Y
- TLSH T14D753A0EEAB582E5D0BAD078C652B52BFC7134AA83305BE356919B572F237E4D93D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1