General
- Target 2026-07-21_a7b556b780ed1e1220d8ffbf5d0246f7_cobalt-strike_icedid_satacom_stealc
- Size 7.6MB
- Sample260721-cye7jsd16z
- SHA256 15f87f5ffff57524756bdaff1a13afcded21ddd161c1e3337df198d61d639830
- MD5 a7b556b780ed1e1220d8ffbf5d0246f7
- SHA1 b6e628f272949caf47ecbefeb592404d9a053b59
- SHA512 5fa53383607ad0d1bfcf80b81c6086c8ae431b6dcdc910792ba1f3ae50d50ef181d1b0d234b306175e552a34e4ba9e9a3da657e46b7708d43262bfa92a9c6bfd
- SSDEEP 196608:5eFMvDusDiYXy7D8KOA1WMBlOIRfAVqbrgpyLe1j:YFMSIiS0YKOCJJRffbrgGe
- TLSH T1CA863332F19928B5DA6BC17CD8578A02D933BC454711EACB13A076821EB33E58E3FB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_a7b556b780ed1e1220d8ffbf5d0246f7_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_a7b556b780ed1e1220d8ffbf5d0246f7_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_a7b556b780ed1e1220d8ffbf5d0246f7_cobalt-strike_icedid_satacom_stealc
- Size 7.6MB
- SHA256 15f87f5ffff57524756bdaff1a13afcded21ddd161c1e3337df198d61d639830
- MD5 a7b556b780ed1e1220d8ffbf5d0246f7
- SHA1 b6e628f272949caf47ecbefeb592404d9a053b59
- SHA512 5fa53383607ad0d1bfcf80b81c6086c8ae431b6dcdc910792ba1f3ae50d50ef181d1b0d234b306175e552a34e4ba9e9a3da657e46b7708d43262bfa92a9c6bfd
- SSDEEP 196608:5eFMvDusDiYXy7D8KOA1WMBlOIRfAVqbrgpyLe1j:YFMSIiS0YKOCJJRffbrgGe
- TLSH T1CA863332F19928B5DA6BC17CD8578A02D933BC454711EACB13A076821EB33E58E3FB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.