Analysis
- max time kernel
149s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
03/08/2026, 02:07
General
- Target 2026-08-03_e225ca6c37b4e0ce9787e2af12d8603e_cobalt-strike_icedid_satacom.exe
- Size 266KB
- Sample260803-cj4llaweng
- SHA256 f3368dc36c0a4adf0cd5667f771fbed33309d572ce651be1b6e3cc243afd716e
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_e225ca6c37b4e0ce9787e2af12d8603e_cobalt-strike_icedid_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_e225ca6c37b4e0ce9787e2af12d8603e_cobalt-strike_icedid_satacom.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\MsHst\RuntimeBroker.exe"C:\Users\Admin\AppData\Local\Temp\MsHst\RuntimeBroker.exe"2⤵
-
-
C:\Users\Admin\AppData\Roaming\svchost.exeC:\Users\Admin\AppData\Roaming\svchost.exe1⤵
-
C:\Users\Admin\AppData\Local\Temp\MsHst\RuntimeBroker.exe"C:\Users\Admin\AppData\Local\Temp\MsHst\RuntimeBroker.exe"2⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
svchost.exe
memory/2928-32-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/2928-33-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/2928-38-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-10-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-13-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-6-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-7-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-8-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-9-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-4-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-11-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-12-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-5-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-14-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-15-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-16-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-3-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-0-0x0000017026380000-0x00000170263AE000-memory.dmp
memory/4216-2-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-35-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-34-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/4216-1-0x00007FFD5EB3F000-0x00007FFD5EB40000-memory.dmp
memory/5068-18-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-24-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-25-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-26-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-27-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-28-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-29-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-30-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-23-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-22-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-21-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-20-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-37-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp
memory/5068-19-0x00007FFD5E9B0000-0x00007FFD5F354000-memory.dmp