General
- Target 2026-07-29_a182f67c7f268f574d9e9c93727f5e21_cobalt-strike_icedid_njrat_satacom_stealc
- Size 253KB
- Sample260729-ms49lasalg
- SHA256 43bd19909fecb231ea41a21d1db6434494644d1d423f4418a96d3ad6795830ac
- MD5 a182f67c7f268f574d9e9c93727f5e21
- SHA1 65ddebf8fef0b8ffdf21599abd820c203c71eb36
- SHA512 c5447d7df76c2175f3719ffb0ee81bae4afab046a5490bd70d2f71545e56fb4b5ada587ebd64a62175d6c55c2e5d93bb2087c2886fe4d0506449a454ed09e46d
- SSDEEP 3072:MA8ksYp2UBWSMQ6NnM8FSv9VkyRTOtJsbcZRoGXY6GraOPuI/immzARgpMY:MA8ksYp2UBWSMnm8W9xwKCoGXsP2zRW
- TLSH T140446C19E6A408FDE977C6BDDD534902EA727C4A0731E9DF039009A61F176D48E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a182f67c7f268f574d9e9c93727f5e21_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a182f67c7f268f574d9e9c93727f5e21_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a182f67c7f268f574d9e9c93727f5e21_cobalt-strike_icedid_njrat_satacom_stealc
- Size 253KB
- SHA256 43bd19909fecb231ea41a21d1db6434494644d1d423f4418a96d3ad6795830ac
- MD5 a182f67c7f268f574d9e9c93727f5e21
- SHA1 65ddebf8fef0b8ffdf21599abd820c203c71eb36
- SHA512 c5447d7df76c2175f3719ffb0ee81bae4afab046a5490bd70d2f71545e56fb4b5ada587ebd64a62175d6c55c2e5d93bb2087c2886fe4d0506449a454ed09e46d
- SSDEEP 3072:MA8ksYp2UBWSMQ6NnM8FSv9VkyRTOtJsbcZRoGXY6GraOPuI/immzARgpMY:MA8ksYp2UBWSMnm8W9xwKCoGXsP2zRW
- TLSH T140446C19E6A408FDE977C6BDDD534902EA727C4A0731E9DF039009A61F176D48E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger