General
- Target 2026-08-08_bc6cca68556ecbd445b56c7a6536ec35_cobalt-strike_icedid_njrat_satacom_stealc
- Size 332KB
- Sample260808-da5yqsyejf
- SHA256 1f0e5af5750902acd9cea30c605dce24ab3492b03638e06110c5e04c9183322f
- MD5 bc6cca68556ecbd445b56c7a6536ec35
- SHA1 87d53b1a036b58a76fac6d8eb93b7533ac28aea8
- SHA512 97d503935d018a763386b6c0a4216abe8b5b708c68e1b7ce4cd9f82ecddda0047eb28baa7205f012190cbc50ba2122391129f21071f43d0f2fe887b7a18def71
- SSDEEP 6144:W0yHPsOYseTIKBVnlcyEHtDu64ZVlfRqeMAGGG7+VfM:DOCTzGtDu6m1REg
- TLSH T16F748C15F7A914F9E277D17CC9424906EB72BC460370EACF13A04A962F276D49E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_bc6cca68556ecbd445b56c7a6536ec35_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_bc6cca68556ecbd445b56c7a6536ec35_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bc6cca68556ecbd445b56c7a6536ec35_cobalt-strike_icedid_njrat_satacom_stealc
- Size 332KB
- SHA256 1f0e5af5750902acd9cea30c605dce24ab3492b03638e06110c5e04c9183322f
- MD5 bc6cca68556ecbd445b56c7a6536ec35
- SHA1 87d53b1a036b58a76fac6d8eb93b7533ac28aea8
- SHA512 97d503935d018a763386b6c0a4216abe8b5b708c68e1b7ce4cd9f82ecddda0047eb28baa7205f012190cbc50ba2122391129f21071f43d0f2fe887b7a18def71
- SSDEEP 6144:W0yHPsOYseTIKBVnlcyEHtDu64ZVlfRqeMAGGG7+VfM:DOCTzGtDu6m1REg
- TLSH T16F748C15F7A914F9E277D17CC9424906EB72BC460370EACF13A04A962F276D49E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application