General
- Target 2026-08-03_a1d68725b61bb4c3f032e7ce286eb3e8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 810KB
- Sample260804-mh535scp7w
- SHA256 eac27a6ea3e9cfde34831e20d9e2a8a756c5497a39d55cfcbf5ad209ace95ed9
- MD5 a1d68725b61bb4c3f032e7ce286eb3e8
- SHA1 7f9d1e64d4744b39eec0cb6c6f16694ee3c7e46c
- SHA512 fde002a8daf8536273ff2196888f69ff566ce69005aacb6880ab3efd0520ccf7fdeb19ddf0e4b1b2978599982ead306d294d68266673bca649fec998490f5ac6
- SSDEEP 12288:qYtO8/YzVf1VKubRwrCV2LQR9H29AKeGTph0lhSMXl+/b7rLK:2m0fvKu1TV2CHwAvGFh0lhSMXl6fK
- TLSH T1DC059E26FAA841FCE177D2B88D675902FB72784603706ACF0390956B2F276E45E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a1d68725b61bb4c3f032e7ce286eb3e8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a1d68725b61bb4c3f032e7ce286eb3e8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a1d68725b61bb4c3f032e7ce286eb3e8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 810KB
- SHA256 eac27a6ea3e9cfde34831e20d9e2a8a756c5497a39d55cfcbf5ad209ace95ed9
- MD5 a1d68725b61bb4c3f032e7ce286eb3e8
- SHA1 7f9d1e64d4744b39eec0cb6c6f16694ee3c7e46c
- SHA512 fde002a8daf8536273ff2196888f69ff566ce69005aacb6880ab3efd0520ccf7fdeb19ddf0e4b1b2978599982ead306d294d68266673bca649fec998490f5ac6
- SSDEEP 12288:qYtO8/YzVf1VKubRwrCV2LQR9H29AKeGTph0lhSMXl+/b7rLK:2m0fvKu1TV2CHwAvGFh0lhSMXl6fK
- TLSH T1DC059E26FAA841FCE177D2B88D675902FB72784603706ACF0390956B2F276E45E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE