General
- Target 2026-07-11_690187d269cebd1b1a74fe60b3c0bc53_cobalt-strike_icedid_njrat_satacom_stealc
- Size 26.1MB
- Sample260711-gp226sey2x
- SHA256 66e0b3d9d8159c0481fccbd1016fca23f3d9c6e5472f53f99ad8b7d8e312d32d
- MD5 690187d269cebd1b1a74fe60b3c0bc53
- SHA1 20b39cad9531ac3dce555f416c0253489df7cf43
- SHA512 928408b93aba38386e2cbb8d42c82084ba95ca03917eecb828830f0aac799dc993cb1fe5d76ace19a66f63025fe530be2a9cc97f3f3623b3d2e1ac45572b6fce
- SSDEEP 393216:tcbGZfA8oGNHwHZREw/YzDPwEKyG0UuB90A/RkLDg97P7zPc0:KS818IGPw2G09NRkI97P
- TLSH T1B85712C3BBCE9A6DC8C6F57886066326B156BC0C1710A1DB3BC2A9155D739E10E35FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_690187d269cebd1b1a74fe60b3c0bc53_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_690187d269cebd1b1a74fe60b3c0bc53_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_690187d269cebd1b1a74fe60b3c0bc53_cobalt-strike_icedid_njrat_satacom_stealc
- Size 26.1MB
- SHA256 66e0b3d9d8159c0481fccbd1016fca23f3d9c6e5472f53f99ad8b7d8e312d32d
- MD5 690187d269cebd1b1a74fe60b3c0bc53
- SHA1 20b39cad9531ac3dce555f416c0253489df7cf43
- SHA512 928408b93aba38386e2cbb8d42c82084ba95ca03917eecb828830f0aac799dc993cb1fe5d76ace19a66f63025fe530be2a9cc97f3f3623b3d2e1ac45572b6fce
- SSDEEP 393216:tcbGZfA8oGNHwHZREw/YzDPwEKyG0UuB90A/RkLDg97P7zPc0:KS818IGPw2G09NRkI97P
- TLSH T1B85712C3BBCE9A6DC8C6F57886066326B156BC0C1710A1DB3BC2A9155D739E10E35FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger