General
- Target 2026-07-24_cd7c3dd3eba13bec61a35f8b59dd1e92_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample260724-we93csvekg
- SHA256 92a4cf950ffe218b5d2a652b4052a5ad4e718b17ab12792d970f7bf877b02185
- MD5 cd7c3dd3eba13bec61a35f8b59dd1e92
- SHA1 d7f6e82d68f2a39c3498aed86ca20a3d9cc78f43
- SHA512 66206740da4a012cf28132cce27c619ca46cfa466f435d6fcfe24b156d600a5674c270b6f753734af9679ced59f5ea7a72eeab73c0180fea6850bdaf5abfaf67
- SSDEEP 49152:zwUVnU3F/2a70h88XE+952SzS3DELBULaCj6Qe27I/3+iAVp07SYBr:ul7rY195sT7T23rAVp07l
- TLSH T1A0C5120192E80BACE077C278BD63694CD736B94B97313ECF239C5A460F6A9C6593D790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_cd7c3dd3eba13bec61a35f8b59dd1e92_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_cd7c3dd3eba13bec61a35f8b59dd1e92_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_cd7c3dd3eba13bec61a35f8b59dd1e92_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 92a4cf950ffe218b5d2a652b4052a5ad4e718b17ab12792d970f7bf877b02185
- MD5 cd7c3dd3eba13bec61a35f8b59dd1e92
- SHA1 d7f6e82d68f2a39c3498aed86ca20a3d9cc78f43
- SHA512 66206740da4a012cf28132cce27c619ca46cfa466f435d6fcfe24b156d600a5674c270b6f753734af9679ced59f5ea7a72eeab73c0180fea6850bdaf5abfaf67
- SSDEEP 49152:zwUVnU3F/2a70h88XE+952SzS3DELBULaCj6Qe27I/3+iAVp07SYBr:ul7rY195sT7T23rAVp07l
- TLSH T1A0C5120192E80BACE077C278BD63694CD736B94B97313ECF239C5A460F6A9C6593D790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Modifies security service
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL