General
- Target 2026-07-12_d1854dd2106178ca62fa2497809ad35f_avaddon_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- Sample260713-bpcjmaax3q
- SHA256 ea09674edca3d68b08524e722dc97c25b4b54e5fa6378015c138047256bc10a0
- MD5 d1854dd2106178ca62fa2497809ad35f
- SHA1 3dcaf60961a0f6e910a574fa071dc686abbb0d87
- SHA512 0c5e1b47f2b940fe818672b296e3bb1244fbd44b025996017d2baea12f6218e46363f80be5bec188a2c45a49c62682f40fb48698abb7b29261a79ce1d5de81c8
- SSDEEP 24576:weKlZvzCniDxWLAdmXN30i0GDnd1iz6WuYytoCOG37IfjPCBa4:olZLyOdON3r0CdJWu2G37VBa4
- TLSH T13F857E17A37800EDD1B7C1B9CA165907EBB174491334AADF13D099A62F23AE16F7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_d1854dd2106178ca62fa2497809ad35f_avaddon_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_d1854dd2106178ca62fa2497809ad35f_avaddon_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_d1854dd2106178ca62fa2497809ad35f_avaddon_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- SHA256 ea09674edca3d68b08524e722dc97c25b4b54e5fa6378015c138047256bc10a0
- MD5 d1854dd2106178ca62fa2497809ad35f
- SHA1 3dcaf60961a0f6e910a574fa071dc686abbb0d87
- SHA512 0c5e1b47f2b940fe818672b296e3bb1244fbd44b025996017d2baea12f6218e46363f80be5bec188a2c45a49c62682f40fb48698abb7b29261a79ce1d5de81c8
- SSDEEP 24576:weKlZvzCniDxWLAdmXN30i0GDnd1iz6WuYytoCOG37IfjPCBa4:olZLyOdON3r0CdJWu2G37VBa4
- TLSH T13F857E17A37800EDD1B7C1B9CA165907EBB174491334AADF13D099A62F23AE16F7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key