General
- Target 2026-07-06_8c559c0fcf33c9b5a9655758a6467226_amadey_cobalt-strike_icedid_satacom
- Size 114KB
- Sample260707-cv347sc19k
- SHA256 009e08ce753fd98c135c8b9cc2d67c9675179e1a407a8f46788a5af71ba5d9d9
- MD5 8c559c0fcf33c9b5a9655758a6467226
- SHA1 58c7c5ebb2f21870a1db240f15ed9551eaf37a86
- SHA512 634b530f395a6f1ac3e5f72180cf86bb10c98bb952538701456e3b378fede43ccfcdf4980435f264e13ddd12e20470fcda89a27d5c2a094a2d493f8c7b5c6adc
- SSDEEP 3072:A9r3wu4/aVYQp/XSkYS7hEUwTpwlaj0Ld0:AY/UYdHSFB8ke
- TLSH T106B33957A3E530F9E573863C84A24A46E772B8350B609FEF03A4465A1F276D0DD3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_8c559c0fcf33c9b5a9655758a6467226_amadey_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_8c559c0fcf33c9b5a9655758a6467226_amadey_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_8c559c0fcf33c9b5a9655758a6467226_amadey_cobalt-strike_icedid_satacom
- Size 114KB
- SHA256 009e08ce753fd98c135c8b9cc2d67c9675179e1a407a8f46788a5af71ba5d9d9
- MD5 8c559c0fcf33c9b5a9655758a6467226
- SHA1 58c7c5ebb2f21870a1db240f15ed9551eaf37a86
- SHA512 634b530f395a6f1ac3e5f72180cf86bb10c98bb952538701456e3b378fede43ccfcdf4980435f264e13ddd12e20470fcda89a27d5c2a094a2d493f8c7b5c6adc
- SSDEEP 3072:A9r3wu4/aVYQp/XSkYS7hEUwTpwlaj0Ld0:AY/UYdHSFB8ke
- TLSH T106B33957A3E530F9E573863C84A24A46E772B8350B609FEF03A4465A1F276D0DD3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.