78ae79e6148c4466eb2ea4d06587a1aecf588a0f127fb37e39dedad43a974d7c

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 01:34

Target
2026-08-06_5e8501e32448a6e40160dbc805c46a91_cobalt-strike_icedid_satacom_stealc.exe
Size 680KB
Sample260806-bzc8xafb68
SHA256 78ae79e6148c4466eb2ea4d06587a1aecf588a0f127fb37e39dedad43a974d7c
MD5 5e8501e32448a6e40160dbc805c46a91
SHA1 11fedd3852fb49bde4c24b3e7a12f29412c9a3ce
SHA512 4c219260d258870f1f6336ae96b2f44802d50a732de78c9dd9ae964964b61eccf79b754009c9b6518630d45c15e3a0a78ee3253b57144053fba30d6d4cedae26
SSDEEP 6144:u56tP217MbXmchWPCuLifwrCCPuLSg38b/RYslig+lREmczpIorDxONY3IP+f:eSaMbXmyTwrC1S8QplijlRlczvwbW
TLSH
T1FAE48D53F5AA41FCC02B9579CA5A4353EBB17C4813006AEB4390DBA53F23AE85F38795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4340	2026-08-06_5e8501e32448a6e40160dbc805c46a91_cobalt-strike_icedid_satacom_stealc.exe
4340	2026-08-06_5e8501e32448a6e40160dbc805c46a91_cobalt-strike_icedid_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-06_5e8501e32448a6e40160dbc805c46a91_cobalt-strike_icedid_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-06_5e8501e32448a6e40160dbc805c46a91_cobalt-strike_icedid_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4340