General
- Target 2026-08-07_4be28426f0e16150131e1d75f553a38d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 313KB
- Sample260808-bs51caxdme
- SHA256 1b513f47a8655f236a1826f8715b164e0e3a675e49638e81b1e26c1d0c201530
- MD5 4be28426f0e16150131e1d75f553a38d
- SHA1 288b8fa97964fc2241b04d3860459876422e64db
- SHA512 814891712c02f61177d6f61bd734a83351d9f67764f1c4aee5592d6714db4f256b4727cc4d30f5aafeeff6cd66cf028c26febe58c51ed95725a2b2a938f1b3e0
- SSDEEP 6144:Y3B1Z7aGqH+F+L+OZBjJF5+jFNIkq1/RIQK:xGqH+F+L+OZPF5aG6
- TLSH T1BA646B15E7A514F9E677857CCD824906EA72BC464760EACF03A04A973F236D48E3FB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_4be28426f0e16150131e1d75f553a38d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_4be28426f0e16150131e1d75f553a38d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_4be28426f0e16150131e1d75f553a38d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 313KB
- SHA256 1b513f47a8655f236a1826f8715b164e0e3a675e49638e81b1e26c1d0c201530
- MD5 4be28426f0e16150131e1d75f553a38d
- SHA1 288b8fa97964fc2241b04d3860459876422e64db
- SHA512 814891712c02f61177d6f61bd734a83351d9f67764f1c4aee5592d6714db4f256b4727cc4d30f5aafeeff6cd66cf028c26febe58c51ed95725a2b2a938f1b3e0
- SSDEEP 6144:Y3B1Z7aGqH+F+L+OZBjJF5+jFNIkq1/RIQK:xGqH+F+L+OZPF5aG6
- TLSH T1BA646B15E7A514F9E677857CCD824906EA72BC464760EACF03A04A973F236D48E3FB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application