General
- Target 2026-07-13_2ff141f3c12836045f15e2f52cc3289a_avaddon_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- Sample260713-mphlesfy3l
- SHA256 68da277591e4fed8374b6decf9a73f291b8497dc2f346416bebca86fe822ef19
- MD5 2ff141f3c12836045f15e2f52cc3289a
- SHA1 0c09e11e17704b92d6d97a1bbac53d5097366c46
- SHA512 df3f8746114bdf15de0583033ed04ea8fe17af8162678d8c87a67de852c4a96d38233808ab2cf1e482e41557c40e0a2bdc7227662a4dbffde76f0d3ce5c86d12
- SSDEEP 24576:JIUr0V/Wz0lobK6/4i/r5xCiY9v0xxn/04iSH8l0Y72kGfJGgbi:Br0V/Wz0uWk4Mr/CB50D/0W8lLGfJU
- TLSH T1C0858D17A37400EDD1A7C1B9CA165A07EBB174490731AADF13D0DAA62F23AE15F7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-13_2ff141f3c12836045f15e2f52cc3289a_avaddon_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_2ff141f3c12836045f15e2f52cc3289a_avaddon_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_2ff141f3c12836045f15e2f52cc3289a_avaddon_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- SHA256 68da277591e4fed8374b6decf9a73f291b8497dc2f346416bebca86fe822ef19
- MD5 2ff141f3c12836045f15e2f52cc3289a
- SHA1 0c09e11e17704b92d6d97a1bbac53d5097366c46
- SHA512 df3f8746114bdf15de0583033ed04ea8fe17af8162678d8c87a67de852c4a96d38233808ab2cf1e482e41557c40e0a2bdc7227662a4dbffde76f0d3ce5c86d12
- SSDEEP 24576:JIUr0V/Wz0lobK6/4i/r5xCiY9v0xxn/04iSH8l0Y72kGfJGgbi:Br0V/Wz0uWk4Mr/CB50D/0W8lLGfJU
- TLSH T1C0858D17A37400EDD1A7C1B9CA165A07EBB174490731AADF13D0DAA62F23AE15F7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key