General
- Target 2026-08-01_13cada45f6e957b4008cc2584832a815_cobalt-strike_icedid_satacom
- Size 41.9MB
- Sample260801-g6wayszepb
- SHA256 c61620843da0a427e0f4c1840ca8c0bd8056cbe6a4149886c7a4111c193265ae
- MD5 13cada45f6e957b4008cc2584832a815
- SHA1 4f677a4cacf2ca962929293c87224af754d1bb99
- SHA512 5af567e14aaa33890284ca78146a450e1f6f2b1a79ab203aef30bab960936383d65e43502a75aecb72375a879cc92ad438b51e303bb0cd1eecb28d67d788b433
- SSDEEP 786432:zbH5AduqcZjR932s4u6ZPgm+7ARktTAWvWYMbc45T1FdMU9eO75ThH2YGc04RHCW:ZAdtkjR93neZPgm+ECH2c45dMU9eO7Rf
- TLSH T186A733A71716CDE7D26476B50217C7104F01B2A1A89243B21D5A84BF2E3D7DE8F86E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_13cada45f6e957b4008cc2584832a815_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_13cada45f6e957b4008cc2584832a815_cobalt-strike_icedid_satacom
- Size 41.9MB
- SHA256 c61620843da0a427e0f4c1840ca8c0bd8056cbe6a4149886c7a4111c193265ae
- MD5 13cada45f6e957b4008cc2584832a815
- SHA1 4f677a4cacf2ca962929293c87224af754d1bb99
- SHA512 5af567e14aaa33890284ca78146a450e1f6f2b1a79ab203aef30bab960936383d65e43502a75aecb72375a879cc92ad438b51e303bb0cd1eecb28d67d788b433
- SSDEEP 786432:zbH5AduqcZjR932s4u6ZPgm+7ARktTAWvWYMbc45T1FdMU9eO75ThH2YGc04RHCW:ZAdtkjR93neZPgm+ECH2c45dMU9eO7Rf
- TLSH T186A733A71716CDE7D26476B50217C7104F01B2A1A89243B21D5A84BF2E3D7DE8F86E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.