General
- Target 2026-07-07_c3b2ac3dc1d3d99c6fcc6f344a656203_cobalt-strike_icedid_satacom_stealc
- Size 415KB
- Sample260708-a7pfgagy3x
- SHA256 731d56c0731e5a7cb54af5673c9d31ef7f70fe1a215cfccff55c2c63e38232fa
- MD5 c3b2ac3dc1d3d99c6fcc6f344a656203
- SHA1 10b5da850b3680219e0011ea9aa24f04dfebe0c1
- SHA512 3aefaa0c00457b5e001d64d13512efc5c4ccf5fa9d27242a30299cac0668791a7f545780b13aa9b588e8ae8ba0228fe71a46c828edbd1c2777f6400d1562be0b
- SSDEEP 6144:5lXbslWtRB90/vjeeU1g2Ze8sU5Ix/96HFm1:5lXbTXcXje42M8sSY96lm
- TLSH T11294F74BFAB510E1D5FAD0388542662AFCB134AA4330ABCB57D55A571B23BF4E93DB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_c3b2ac3dc1d3d99c6fcc6f344a656203_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_c3b2ac3dc1d3d99c6fcc6f344a656203_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_c3b2ac3dc1d3d99c6fcc6f344a656203_cobalt-strike_icedid_satacom_stealc
- Size 415KB
- SHA256 731d56c0731e5a7cb54af5673c9d31ef7f70fe1a215cfccff55c2c63e38232fa
- MD5 c3b2ac3dc1d3d99c6fcc6f344a656203
- SHA1 10b5da850b3680219e0011ea9aa24f04dfebe0c1
- SHA512 3aefaa0c00457b5e001d64d13512efc5c4ccf5fa9d27242a30299cac0668791a7f545780b13aa9b588e8ae8ba0228fe71a46c828edbd1c2777f6400d1562be0b
- SSDEEP 6144:5lXbslWtRB90/vjeeU1g2Ze8sU5Ix/96HFm1:5lXbTXcXje42M8sSY96lm
- TLSH T11294F74BFAB510E1D5FAD0388542662AFCB134AA4330ABCB57D55A571B23BF4E93DB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1