Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 12:54
General
- Target 2026-07-27_b61d4a8226042e22b1894a6bd3adeddf_cobalt-strike_icedid_satacom_stealc.exe
- Size 2.8MB
- Sample260727-p5mw7asfqa
- SHA256 0d69edcaa0fd7fb96cd7fa28d0c3fe6dfd4be4147cf06fcea2a9a8d8f76da98d
Malware Config
Signatures
- Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
- XMRig Miner payload 22 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-27_b61d4a8226042e22b1894a6bd3adeddf_cobalt-strike_icedid_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-27_b61d4a8226042e22b1894a6bd3adeddf_cobalt-strike_icedid_satacom_stealc.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/8-5-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-4-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-8-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-14-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-12-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-7-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-6-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-16-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-17-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-20-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-18-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-19-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-11-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-0-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-15-0x0000024A91FB0000-0x0000024A91FD0000-memory.dmp
memory/8-13-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-10-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-3-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-1-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-9-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-2-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-21-0x0000024A92610000-0x0000024A92FF0000-memory.dmp
memory/8-22-0x0000024A92610000-0x0000024A92FF0000-memory.dmp