General
- Target 2026-07-12_8a31de1946c34aaadc7dd79e11f9112b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.3MB
- Sample260712-kysrmsfs4k
- SHA256 02f69bd3785b632a96420424b03abb598e11c041f11cc10f897245516ca0ee10
- MD5 8a31de1946c34aaadc7dd79e11f9112b
- SHA1 e863bb7187085d4c7ee219c275d70969a16d5b8c
- SHA512 c4141a533618ea84e7999e0229b26d1b3cd4b4a8d75c8e6f059bd87de3daabf3c3fff17a7ab02ef19e7fa6276e4baf99fee377070f84fe254a7ab891df4c7a05
- SSDEEP 24576:uaFqMQlWR1v1lu4euPu5sDtZ84ep7CLuxBhZIIaM2DDIFSMBjv/WqsCkaCf2jMA4:uaV1hv0SMBb3bwWHYn
- TLSH T14455B04D73A841F8D1A7D1B9DAA1690FEB317459072049EB83E80E182F637E49E7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_8a31de1946c34aaadc7dd79e11f9112b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_8a31de1946c34aaadc7dd79e11f9112b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_8a31de1946c34aaadc7dd79e11f9112b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.3MB
- SHA256 02f69bd3785b632a96420424b03abb598e11c041f11cc10f897245516ca0ee10
- MD5 8a31de1946c34aaadc7dd79e11f9112b
- SHA1 e863bb7187085d4c7ee219c275d70969a16d5b8c
- SHA512 c4141a533618ea84e7999e0229b26d1b3cd4b4a8d75c8e6f059bd87de3daabf3c3fff17a7ab02ef19e7fa6276e4baf99fee377070f84fe254a7ab891df4c7a05
- SSDEEP 24576:uaFqMQlWR1v1lu4euPu5sDtZ84ep7CLuxBhZIIaM2DDIFSMBjv/WqsCkaCf2jMA4:uaV1hv0SMBb3bwWHYn
- TLSH T14455B04D73A841F8D1A7D1B9DAA1690FEB317459072049EB83E80E182F637E49E7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1