General
- Target 2026-07-11_bc6a6a12d582b6c198eceffa9d372eb6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260711-st8lasfv2t
- SHA256 728e6054ede3f5c3124088e709f76745e352815e7a3fea8e730b8a74eb60eb41
- MD5 bc6a6a12d582b6c198eceffa9d372eb6
- SHA1 9f53af248bfbbb8a331f233b9795453ad8c8d7cf
- SHA512 873cec5be949da488ce643e7d7fc36b0184e31c21a44307d5dfa56b44a833c80702604404882d7c00ca696c81bd67f346c62a2b9f641f249dec379c5721bd6b0
- SSDEEP 49152:ZmCJRqhh5boojJfPfPIUEB8nYunAm/h0Iyw:kCQjl2aYsAm/h
- TLSH T1B1757D47E65754D8D06BD5B8836B6502EE11384E8739F8EF17C696672F3B3E09A38302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_bc6a6a12d582b6c198eceffa9d372eb6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_bc6a6a12d582b6c198eceffa9d372eb6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_bc6a6a12d582b6c198eceffa9d372eb6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 728e6054ede3f5c3124088e709f76745e352815e7a3fea8e730b8a74eb60eb41
- MD5 bc6a6a12d582b6c198eceffa9d372eb6
- SHA1 9f53af248bfbbb8a331f233b9795453ad8c8d7cf
- SHA512 873cec5be949da488ce643e7d7fc36b0184e31c21a44307d5dfa56b44a833c80702604404882d7c00ca696c81bd67f346c62a2b9f641f249dec379c5721bd6b0
- SSDEEP 49152:ZmCJRqhh5boojJfPfPIUEB8nYunAm/h0Iyw:kCQjl2aYsAm/h
- TLSH T1B1757D47E65754D8D06BD5B8836B6502EE11384E8739F8EF17C696672F3B3E09A38302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables referencing combination of virtualization drivers
-
Modifies Windows Firewall