Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 15:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_6948b1a9e0a947c87acad643926cb512_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_6948b1a9e0a947c87acad643926cb512_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-06_6948b1a9e0a947c87acad643926cb512_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 8.0MB
- Sample260806-std2pael3s
- SHA256 793b856b9c6506f821b64e0e3dcd2cc91cccf98d2f0128144a36f15ad6b5f016
- MD5 6948b1a9e0a947c87acad643926cb512
- SHA1 362b3ad1594ee9e8e84eea9396184a5eb434cbe9
- SHA512 aac6086ad1e7a135aafb889b8dc8ce7a64b5fd77cfe7436ef0536151f682000721bf5f73d51e5484ff9433b87ca79d6721f36cc33cd30fcf6f7f108d519a775b
- SSDEEP 98304:wXVhRVZG3oBHBqerea7FLOAkGkzdnEVomFHKnP:uBnHnT7FLOyomFHKnP
- TLSH T187866DA75A9D00E8E4BAD13E95026627F9717CE1477152D36AD02E4F4F7BAE01E3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 4324 DriverInject_Super.sys - Suspicious behavior: LoadsDriver 1 IoCs
pid Process 812 Process not Found - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4608 2026-08-06_6948b1a9e0a947c87acad643926cb512_cobalt-strike_icedid_njrat_satacom_stealc.exe 4608 2026-08-06_6948b1a9e0a947c87acad643926cb512_cobalt-strike_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_6948b1a9e0a947c87acad643926cb512_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_6948b1a9e0a947c87acad643926cb512_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:4608
-
C:\Users\Admin\AppData\Local\Temp\DriverInject_Super.sysC:\Users\Admin\AppData\Local\Temp\DriverInject_Super.sys1⤵
- Executes dropped EXE
PID:4324
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\DriverInject_Super.sys
- Size 69KB
- SHA256 c0d84a55aeea6092a2bf1ade40fb68d22b61beeb967181aab566f3dc08e77e52
- MD5 c3c68024495faa28bd3e39f5c59160c4
- SHA1 4457fd9d4e115b09e24df89cbd499d211051f48c
- SHA512 2eefbace98bfa94622e0935ab3c5b8c20f6fb369e375858465b575e5fff00df7de5d6df41fd864f25009fc51b05faaf7e7402a4ce8242f5a706fbc5ef866ad9a
- SSDEEP 768:WbFx7a9zqloY0Sky63PNml2ykszmqf1Fc1LfMVGLpAuL8BZXo0d1nwi:WFx7a9qYwl2ykir1FcRksdAuL6ZPd5
- TLSH T18B63B41BE6B660DDD8B5D031E5227237BAB1B88C433577EB9A414B169F307E0A93E704
- MD5 SHA1 SHA512 SSDEEP TLSH