General
- Target 2026-07-18_b790da570d6b419b8a5129d33b1141ab_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.3MB
- Sample260718-mk9jcagv3j
- SHA256 427bf5b26969c270f5a97c9481926bc07f6d1b3be0cf5065ced9ec7e5370cb6d
- MD5 b790da570d6b419b8a5129d33b1141ab
- SHA1 5d4623bfbedb55591d4776bc391a2700174d111a
- SHA512 c1784aef00ffce7f380f53fc06fccbe397a42cbee4022842141ffefd945f02ab71576057b5da8e3b1db4abb14d43a7361d8802bb5e526b4d540b5ef0bf55e11e
- SSDEEP 24576:ULBXJJcqKr0nd12/apHvCWofXgasK9i63noQ1dF:ULBZJkW2/a7S8tmn9
- TLSH T15555BF4C73A801F8D1ABD179DAA1690BEB757419073089EB83EC0D192F637E49A7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_b790da570d6b419b8a5129d33b1141ab_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_b790da570d6b419b8a5129d33b1141ab_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_b790da570d6b419b8a5129d33b1141ab_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.3MB
- SHA256 427bf5b26969c270f5a97c9481926bc07f6d1b3be0cf5065ced9ec7e5370cb6d
- MD5 b790da570d6b419b8a5129d33b1141ab
- SHA1 5d4623bfbedb55591d4776bc391a2700174d111a
- SHA512 c1784aef00ffce7f380f53fc06fccbe397a42cbee4022842141ffefd945f02ab71576057b5da8e3b1db4abb14d43a7361d8802bb5e526b4d540b5ef0bf55e11e
- SSDEEP 24576:ULBXJJcqKr0nd12/apHvCWofXgasK9i63noQ1dF:ULBZJkW2/a7S8tmn9
- TLSH T15555BF4C73A801F8D1ABD179DAA1690BEB757419073089EB83EC0D192F637E49A7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1