General
- Target 2026-08-07_f6c535bd97046c20f8d8dbc966d301a7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample260807-lph2hsvwaw
- SHA256 826e429302154576c05e762691416cf24da0c26ed30d42ea3708f9275b27225d
- MD5 f6c535bd97046c20f8d8dbc966d301a7
- SHA1 87953f252a9f8b3a7c05bb19984f4bdaf14d8f59
- SHA512 ae9cc9c44a3109c657f8ee2b788e2bdf55a84a8d9b66c8ab30346795b70510b62e906c1923546d9b9bd55d0522d69e2a0e67ee3c903450b326489a7760024c81
- SSDEEP 49152:5wUVnU3a5fXLi/YYoApW42xAqBQjEGgg+/K/U0B:h5TPYSbHBQQDKs0B
- TLSH T1B3C5120679D901FDE2BBD2B9CD211541D72A78D90BA0AECF23C84A470F66EC68D3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_f6c535bd97046c20f8d8dbc966d301a7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_f6c535bd97046c20f8d8dbc966d301a7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_f6c535bd97046c20f8d8dbc966d301a7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 826e429302154576c05e762691416cf24da0c26ed30d42ea3708f9275b27225d
- MD5 f6c535bd97046c20f8d8dbc966d301a7
- SHA1 87953f252a9f8b3a7c05bb19984f4bdaf14d8f59
- SHA512 ae9cc9c44a3109c657f8ee2b788e2bdf55a84a8d9b66c8ab30346795b70510b62e906c1923546d9b9bd55d0522d69e2a0e67ee3c903450b326489a7760024c81
- SSDEEP 49152:5wUVnU3a5fXLi/YYoApW42xAqBQjEGgg+/K/U0B:h5TPYSbHBQQDKs0B
- TLSH T1B3C5120679D901FDE2BBD2B9CD211541D72A78D90BA0AECF23C84A470F66EC68D3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Modifies security service
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL