General
- Target 2026-08-07_3fe216d1b654dad83c3d50872d9cefee_cobalt-strike_icedid_satacom_stealc
- Size 236KB
- Sample260807-grw9psgr3t
- SHA256 a6defaa64d14c3998cd050dd467de4cf267b468bb3f646cec14ad7471b95b7a3
- MD5 3fe216d1b654dad83c3d50872d9cefee
- SHA1 a6807847d1775da0e4cb18327423770231364624
- SHA512 96655be75a75d5a0a7af621c28469af4f889eea3d72130db2cf8f6730fb1b7dd75d5e47d4e7adebcc596eed3b067733e66e235728a94cc14dd163881c7636092
- SSDEEP 3072:l9WCHNuBLrilPjWoyqsD+zybpYs2OoaCmnhsZfs3C:l9jOril76QcLV2
- TLSH T1E8347D1362EC3CE6D03A9274B7BB43C1E72EEC6557A1C69E02D002A59E7E1937D267D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_3fe216d1b654dad83c3d50872d9cefee_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_3fe216d1b654dad83c3d50872d9cefee_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_3fe216d1b654dad83c3d50872d9cefee_cobalt-strike_icedid_satacom_stealc
- Size 236KB
- SHA256 a6defaa64d14c3998cd050dd467de4cf267b468bb3f646cec14ad7471b95b7a3
- MD5 3fe216d1b654dad83c3d50872d9cefee
- SHA1 a6807847d1775da0e4cb18327423770231364624
- SHA512 96655be75a75d5a0a7af621c28469af4f889eea3d72130db2cf8f6730fb1b7dd75d5e47d4e7adebcc596eed3b067733e66e235728a94cc14dd163881c7636092
- SSDEEP 3072:l9WCHNuBLrilPjWoyqsD+zybpYs2OoaCmnhsZfs3C:l9jOril76QcLV2
- TLSH T1E8347D1362EC3CE6D03A9274B7BB43C1E72EEC6557A1C69E02D002A59E7E1937D267D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Modifies boot configuration data using bcdedit
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1