General
- Target 2026-07-27_0914668e5219c42945e230ba84b6cbaa_cobalt-strike_icedid_njrat_satacom_stealc
- Size 306KB
- Sample260727-2ych4adf99
- SHA256 67797b8bd949ec4ebcb487c4360ebf7481e4049199851fd24bc1df7247246d02
- MD5 0914668e5219c42945e230ba84b6cbaa
- SHA1 f8820618b8682d252c625f29e4652a2fedc609aa
- SHA512 eafb8e76a31f5315d43286ba072074adae300d890fdcecaf73ea52c41b6418c1003189e0802a66142e341a99fbe7a975627edc8c93c5d2046d7bda915ee1189c
- SSDEEP 6144:PdAiyWkjuF8K4SatnPvLYTgn3k+NodYX:aiy3uqKMtnssnUeW
- TLSH T1C1648D19F7A904F9E967867CC9460906EA727C5607B1E7CF03E04A962F237E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_0914668e5219c42945e230ba84b6cbaa_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_0914668e5219c42945e230ba84b6cbaa_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_0914668e5219c42945e230ba84b6cbaa_cobalt-strike_icedid_njrat_satacom_stealc
- Size 306KB
- SHA256 67797b8bd949ec4ebcb487c4360ebf7481e4049199851fd24bc1df7247246d02
- MD5 0914668e5219c42945e230ba84b6cbaa
- SHA1 f8820618b8682d252c625f29e4652a2fedc609aa
- SHA512 eafb8e76a31f5315d43286ba072074adae300d890fdcecaf73ea52c41b6418c1003189e0802a66142e341a99fbe7a975627edc8c93c5d2046d7bda915ee1189c
- SSDEEP 6144:PdAiyWkjuF8K4SatnPvLYTgn3k+NodYX:aiy3uqKMtnssnUeW
- TLSH T1C1648D19F7A904F9E967867CC9460906EA727C5607B1E7CF03E04A962F237E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Detects Reflective DLL injection artifacts
-
Downloads MZ/PE file
-
Executes dropped EXE