General
- Target 2026-08-04_6a911cfaba34e2715875920864a479ad_cobalt-strike_icedid_satacom_stealc
- Size 231KB
- Sample260804-sw3ststcmb
- SHA256 857f2101039e995c13de2540a802625d7ffa95f76092db63a63d733c92819c53
- MD5 6a911cfaba34e2715875920864a479ad
- SHA1 3d695f3d6fa26fc3cd8fedd52698d80d13e7e1b3
- SHA512 e8514095ae47ec73debe11dd7263f2b3c32e4d27b6200b3fc87ea933859ca22dd4d125a774be89469d47df2ec8b9c54980e68bd4067f4f249f9350cd2ba045e6
- SSDEEP 3072:TBhy14mT6xnXhFGA+fW3ENXFDZga/UtRC6sIntsA+/Y1g8TW+CFqSJ:TBw6xnXGA+OO3yRt+/Y1g18SJ
- TLSH T15B346C1677A50CF9E97B8679CD124945EA72BC424761FBCF03A00A978F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_6a911cfaba34e2715875920864a479ad_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_6a911cfaba34e2715875920864a479ad_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6a911cfaba34e2715875920864a479ad_cobalt-strike_icedid_satacom_stealc
- Size 231KB
- SHA256 857f2101039e995c13de2540a802625d7ffa95f76092db63a63d733c92819c53
- MD5 6a911cfaba34e2715875920864a479ad
- SHA1 3d695f3d6fa26fc3cd8fedd52698d80d13e7e1b3
- SHA512 e8514095ae47ec73debe11dd7263f2b3c32e4d27b6200b3fc87ea933859ca22dd4d125a774be89469d47df2ec8b9c54980e68bd4067f4f249f9350cd2ba045e6
- SSDEEP 3072:TBhy14mT6xnXhFGA+fW3ENXFDZga/UtRC6sIntsA+/Y1g8TW+CFqSJ:TBw6xnXGA+OO3yRt+/Y1g18SJ
- TLSH T15B346C1677A50CF9E97B8679CD124945EA72BC424761FBCF03A00A978F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.