General
- Target 2026-07-26_ff5927bc830b839637b9a611fc57465d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.7MB
- Sample260726-zta4csdn4t
- SHA256 75353c96e58a062931e2887ec6f319a5669823dc255e817e91d96b58969c76b7
- MD5 ff5927bc830b839637b9a611fc57465d
- SHA1 794a3393c42684eca1e5c46f9d7b695d9e6d54b8
- SHA512 ed162835de9ace90f2c4111202a634e14d041083833828656ae1fc18e52e018c649457ae468ad1d8072ff14f6578b36bcc7063363e736b76575cfdd7e3ffd2a1
- SSDEEP 49152:Ln7svarmdPmPbv/DPDsnuUagzwRThHiMRrZYY1ejnl6A8uIsQ8kPI+6MG5+:LZmmPCAHirIsQ8kPuv+
- TLSH T1E806BF16726521D9C5A9D2B8CA0B9507E73630451330B79B26ADBA8FDFE37F0497E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
7 signatures
Behavioral task
behavioral1
Sample
2026-07-26_ff5927bc830b839637b9a611fc57465d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_ff5927bc830b839637b9a611fc57465d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_ff5927bc830b839637b9a611fc57465d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.7MB
- SHA256 75353c96e58a062931e2887ec6f319a5669823dc255e817e91d96b58969c76b7
- MD5 ff5927bc830b839637b9a611fc57465d
- SHA1 794a3393c42684eca1e5c46f9d7b695d9e6d54b8
- SHA512 ed162835de9ace90f2c4111202a634e14d041083833828656ae1fc18e52e018c649457ae468ad1d8072ff14f6578b36bcc7063363e736b76575cfdd7e3ffd2a1
- SSDEEP 49152:Ln7svarmdPmPbv/DPDsnuUagzwRThHiMRrZYY1ejnl6A8uIsQ8kPI+6MG5+:LZmmPCAHirIsQ8kPuv+
- TLSH T1E806BF16726521D9C5A9D2B8CA0B9507E73630451330B79B26ADBA8FDFE37F0497E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.