General
- Target 2026-07-07_70b788ba60bee1bce67ea215c6fdac47_cobalt-strike_icedid_satacom
- Size 4.9MB
- Sample260707-rq7ddsft4x
- SHA256 79f6048201726099c59f673d86a2ac0c382938d94dd3fe4d17c2f3f1bd0c5186
- MD5 70b788ba60bee1bce67ea215c6fdac47
- SHA1 9eaed68b0a5e4ee0dc41464245a846ad1f685041
- SHA512 097ff78d0c3139b9ffb4b2dfdbc94412d2bd562beba9ea2a3dbe2047596a0b78434868064dfd974eaaa3009b8fe0887b08537f636b069af3b7a8a97209255533
- SSDEEP 98304:0KrodtFORsywRrIgnxES2l5IJTUTpTpwOY59k:0NFoTA9nxSl5IJT8Ym
- TLSH T12336332AF0E211E2F7974276C42A2535E3B1F66D4BE49FEF7325C2198C432C88C71A55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_70b788ba60bee1bce67ea215c6fdac47_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_70b788ba60bee1bce67ea215c6fdac47_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_70b788ba60bee1bce67ea215c6fdac47_cobalt-strike_icedid_satacom
- Size 4.9MB
- SHA256 79f6048201726099c59f673d86a2ac0c382938d94dd3fe4d17c2f3f1bd0c5186
- MD5 70b788ba60bee1bce67ea215c6fdac47
- SHA1 9eaed68b0a5e4ee0dc41464245a846ad1f685041
- SHA512 097ff78d0c3139b9ffb4b2dfdbc94412d2bd562beba9ea2a3dbe2047596a0b78434868064dfd974eaaa3009b8fe0887b08537f636b069af3b7a8a97209255533
- SSDEEP 98304:0KrodtFORsywRrIgnxES2l5IJTUTpTpwOY59k:0NFoTA9nxSl5IJT8Ym
- TLSH T12336332AF0E211E2F7974276C42A2535E3B1F66D4BE49FEF7325C2198C432C88C71A55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
-
Executes dropped EXE