General
- Target 2026-07-20_c8e8b06d3517549b056fe9840f4a79c6_cobalt-strike_icedid_satacom
- Size 1.6MB
- Sample260720-nb2yksat4t
- SHA256 227b5d4d6293acecacd581e38673809a8ced6bfc8df023f046b4f5468c5a3147
- MD5 c8e8b06d3517549b056fe9840f4a79c6
- SHA1 aa77d5f90ab2ddd714abfef51a76b795ba6b7643
- SHA512 bb30a69898b92c6e33bbb2f2f3e08780e7601daa01814f997152a3e81a591c8007ee193a56248d7159528c9580edc294a082076772a830f960cc1e0ac4cd2056
- SSDEEP 49152:Ei1e3hIR4OqLh4RA55n/UE32gKEoiaWezUN/oC4B/t:Y7LY7D
- TLSH T1BA759DF9678DB9A0E2E47B32AF2324BBE508B18CA34553793303D750704B778B59E499
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_c8e8b06d3517549b056fe9840f4a79c6_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_c8e8b06d3517549b056fe9840f4a79c6_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_c8e8b06d3517549b056fe9840f4a79c6_cobalt-strike_icedid_satacom
- Size 1.6MB
- SHA256 227b5d4d6293acecacd581e38673809a8ced6bfc8df023f046b4f5468c5a3147
- MD5 c8e8b06d3517549b056fe9840f4a79c6
- SHA1 aa77d5f90ab2ddd714abfef51a76b795ba6b7643
- SHA512 bb30a69898b92c6e33bbb2f2f3e08780e7601daa01814f997152a3e81a591c8007ee193a56248d7159528c9580edc294a082076772a830f960cc1e0ac4cd2056
- SSDEEP 49152:Ei1e3hIR4OqLh4RA55n/UE32gKEoiaWezUN/oC4B/t:Y7LY7D
- TLSH T1BA759DF9678DB9A0E2E47B32AF2324BBE508B18CA34553793303D750704B778B59E499
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE