General
- Target 2026-08-07_792b796b515f0c353691f032d2eedfde_cobalt-strike_icedid_njrat_satacom
- Size 135KB
- Sample260808-bgqfhsfj5w
- SHA256 ccd5f1ce03e5b5e405a24285dc479e668d52164bbd907f2ed22369f74cc6b2da
- MD5 792b796b515f0c353691f032d2eedfde
- SHA1 cb806eb6b137b13917569d4d2385cf7fb23c3e6a
- SHA512 fca4822c92886300aa965551257fd50d849eb3e5eb88e16fb47558a23986c947a71f33fcb900b8d7e7ddc92919095bcf3c83f2909cce4a975ceeea14789a9f3e
- SSDEEP 3072:kH3BcQW0YifTpMXbg7KRd9c5NPtf1rgzqVbN:kfY+dMP39cnngAZ
- TLSH T108D36C5BB7E630F9E173967989610645E7B2B83117209BFF03A403662F236D18D3AB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_792b796b515f0c353691f032d2eedfde_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_792b796b515f0c353691f032d2eedfde_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_792b796b515f0c353691f032d2eedfde_cobalt-strike_icedid_njrat_satacom
- Size 135KB
- SHA256 ccd5f1ce03e5b5e405a24285dc479e668d52164bbd907f2ed22369f74cc6b2da
- MD5 792b796b515f0c353691f032d2eedfde
- SHA1 cb806eb6b137b13917569d4d2385cf7fb23c3e6a
- SHA512 fca4822c92886300aa965551257fd50d849eb3e5eb88e16fb47558a23986c947a71f33fcb900b8d7e7ddc92919095bcf3c83f2909cce4a975ceeea14789a9f3e
- SSDEEP 3072:kH3BcQW0YifTpMXbg7KRd9c5NPtf1rgzqVbN:kfY+dMP39cnngAZ
- TLSH T108D36C5BB7E630F9E173967989610645E7B2B83117209BFF03A403662F236D18D3AB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Downloads MZ/PE file
-
Suspicious use of SetThreadContext