Analysis
- max time kernel
149s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 12:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 185KB
- Sample260720-p39ceacy9s
- SHA256 b17ef89ae9c92fedc7246ea783289ae84eea2c02d026c38e804b38febd23e7b7
- MD5 b5425ee9460af4497c2b1ee968dccf0f
- SHA1 df4f0a2d42369d6c58ba3b6d9e1e5396c15c57e5
- SHA512 de2a78988a9fc5da4c01767f7301cb45f616e425060a39cb7572bc9a08fbdc7457d8e9c08169424ac164bbb835f9595e2c2087588923870f9b13783258b60d85
- SSDEEP 3072:/3TycsredvAADQgw4fhYGUoswqkiy8lN5VuGV8E7vMVL:/mGX55mDJTuQ0
- TLSH T149045C45B3E510F9E1738279C9A11606F773781507609BEF43A087B6AF277D0AD3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe 4128 2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-20_b5425ee9460af4497c2b1ee968dccf0f_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4128