General
- Target 2026-07-07_03271900eb8e4d63df316fb02b76659d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 659KB
- Sample260707-klzdnabs5l
- SHA256 cb60f8df3e490f9a0d5e7f55579d32f8607e6310a737bbb71fd4e193cbbbfdeb
- MD5 03271900eb8e4d63df316fb02b76659d
- SHA1 425a1847055699cee790d52188b6710807bf0d6f
- SHA512 9bf5a024bc52ab1aa26ea24c67145d7a1a244a809f9021878af0bd2e1dd2a22334854f642336320f7e906741a6bb1bcd510347b0b7ac1e6b0bda4f97bb40d029
- SSDEEP 12288:qSI8H+E3z9OAxiWwof/bTo+1CcsPxjHofKGc:28H+EhOAxi7ofnv13sZbof7c
- TLSH T122E46C55B2E402F9D177C1BA8E874626E772780A1721ABDB17A047972F37AE44F3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_03271900eb8e4d63df316fb02b76659d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_03271900eb8e4d63df316fb02b76659d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_03271900eb8e4d63df316fb02b76659d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 659KB
- SHA256 cb60f8df3e490f9a0d5e7f55579d32f8607e6310a737bbb71fd4e193cbbbfdeb
- MD5 03271900eb8e4d63df316fb02b76659d
- SHA1 425a1847055699cee790d52188b6710807bf0d6f
- SHA512 9bf5a024bc52ab1aa26ea24c67145d7a1a244a809f9021878af0bd2e1dd2a22334854f642336320f7e906741a6bb1bcd510347b0b7ac1e6b0bda4f97bb40d029
- SSDEEP 12288:qSI8H+E3z9OAxiWwof/bTo+1CcsPxjHofKGc:28H+EhOAxi7ofnv13sZbof7c
- TLSH T122E46C55B2E402F9D177C1BA8E874626E772780A1721ABDB17A047972F37AE44F3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.