General
- Target 2026-08-06_f82cba57d7c483eda842497c60e05e8c_cobalt-strike_icedid_satacom
- Size 298KB
- Sample260806-lnwk8ayala
- SHA256 a0c01b3d35472470adc7e05de76ba7695d9c1d2be4d3223ca865afad4f45f400
- MD5 f82cba57d7c483eda842497c60e05e8c
- SHA1 f4aaeeb84147d000dd4ecc70093851b086a2fe25
- SHA512 b5664a76d9340261e4d036dae5270edb649520d96d3a6794b31c1faee86af291ffce2742e066774d95bba2c3b09a7da76780fbf96bd101a40233cbcdcfb62c4e
- SSDEEP 6144:uWwFFH4ELNJAYlSJlw7GNui0g+A6UtV2dymRFNqoJ:lwFFYEhJhcPQAr2pF
- TLSH T13A546A96535DA0E8ED3692378E52CD00D765E4F92BA289DF42C372372AB76C0DC21973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_f82cba57d7c483eda842497c60e05e8c_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_f82cba57d7c483eda842497c60e05e8c_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f82cba57d7c483eda842497c60e05e8c_cobalt-strike_icedid_satacom
- Size 298KB
- SHA256 a0c01b3d35472470adc7e05de76ba7695d9c1d2be4d3223ca865afad4f45f400
- MD5 f82cba57d7c483eda842497c60e05e8c
- SHA1 f4aaeeb84147d000dd4ecc70093851b086a2fe25
- SHA512 b5664a76d9340261e4d036dae5270edb649520d96d3a6794b31c1faee86af291ffce2742e066774d95bba2c3b09a7da76780fbf96bd101a40233cbcdcfb62c4e
- SSDEEP 6144:uWwFFH4ELNJAYlSJlw7GNui0g+A6UtV2dymRFNqoJ:lwFFYEhJhcPQAr2pF
- TLSH T13A546A96535DA0E8ED3692378E52CD00D765E4F92BA289DF42C372372AB76C0DC21973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare Tools registry key
-
Executes dropped EXE