General
- Target 2026-07-07_b559b10592946643b774e7ccd78489f5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.8MB
- Sample260707-rprljsbw6s
- SHA256 036c33ba742911d5197a28abb383136e1211f531c71e739a2c92a80e157b6333
- MD5 b559b10592946643b774e7ccd78489f5
- SHA1 1bb91fe6ffa583ade14dc5ea1148e1f1ed03f2e8
- SHA512 1afdc0542893d47af3c701c4aa5edfc3e0f3c8b986ef2e95d876001999507f0dcc655a3b1734b3b86a73346f3accb8ad13e7f5c311e8994f4c83be834d94a286
- SSDEEP 49152:9DNge7bWNYErOP3RBYo1Wn9mKugq1NTxoPCdIA1sITLl3oKJ6mEO2l3Sx:9DJNdP33rXxo3
- TLSH T1D5D5C09BA2541398C067D93C8523BD0BF672740B1BB09AEF23D97B806F575D09E39B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-07_b559b10592946643b774e7ccd78489f5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_b559b10592946643b774e7ccd78489f5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_b559b10592946643b774e7ccd78489f5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.8MB
- SHA256 036c33ba742911d5197a28abb383136e1211f531c71e739a2c92a80e157b6333
- MD5 b559b10592946643b774e7ccd78489f5
- SHA1 1bb91fe6ffa583ade14dc5ea1148e1f1ed03f2e8
- SHA512 1afdc0542893d47af3c701c4aa5edfc3e0f3c8b986ef2e95d876001999507f0dcc655a3b1734b3b86a73346f3accb8ad13e7f5c311e8994f4c83be834d94a286
- SSDEEP 49152:9DNge7bWNYErOP3RBYo1Wn9mKugq1NTxoPCdIA1sITLl3oKJ6mEO2l3Sx:9DJNdP33rXxo3
- TLSH T1D5D5C09BA2541398C067D93C8523BD0BF672740B1BB09AEF23D97B806F575D09E39B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.