General
- Target 2026-07-20_9b152c9068af51a922df23279de4127d_cobalt-strike_icedid_satacom_stealc
- Size 4.2MB
- Sample260720-dadt9acz9k
- SHA256 72168c16b223958b7008005a9cc8580af731a38dc41d477ec531270ee993eb77
- MD5 9b152c9068af51a922df23279de4127d
- SHA1 b4a75272163e1f98f9c024157508ebaf25b8c174
- SHA512 71d126ffc87e448c05df9395fd1849df62b5a2e4f2a61f678fc88185f367aef37a93e281b1fb5edefea7f6f98ec4dc5a7542201549541bb09e16744a1e004a3c
- SSDEEP 98304:x0bqs0sFZ6TrLTO2VczDgVYJDhzLzlWlpHa/31gb1a9mP:qMFTrLRVYnLzlGpHggb89m
- TLSH T1C1263339CE7424E1C667C23EA6814E0BB930FE96872198DF53444FD62D2B9C19F3E619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_9b152c9068af51a922df23279de4127d_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_9b152c9068af51a922df23279de4127d_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9b152c9068af51a922df23279de4127d_cobalt-strike_icedid_satacom_stealc
- Size 4.2MB
- SHA256 72168c16b223958b7008005a9cc8580af731a38dc41d477ec531270ee993eb77
- MD5 9b152c9068af51a922df23279de4127d
- SHA1 b4a75272163e1f98f9c024157508ebaf25b8c174
- SHA512 71d126ffc87e448c05df9395fd1849df62b5a2e4f2a61f678fc88185f367aef37a93e281b1fb5edefea7f6f98ec4dc5a7542201549541bb09e16744a1e004a3c
- SSDEEP 98304:x0bqs0sFZ6TrLTO2VczDgVYJDhzLzlWlpHa/31gb1a9mP:qMFTrLRVYnLzlGpHggb89m
- TLSH T1C1263339CE7424E1C667C23EA6814E0BB930FE96872198DF53444FD62D2B9C19F3E619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers