General
- Target 2026-08-08_4298d688a227bd7109ca77ebb33e7463_cobalt-strike_icedid_satacom
- Size 110KB
- Sample260808-gj33aaal71
- SHA256 ac9b7b408853ac2e636db150536bc9f580dfd0d97bbab4a0fff221251bbbb51a
- MD5 4298d688a227bd7109ca77ebb33e7463
- SHA1 d51821ce4617b416adfeee32d985caf36732c07c
- SHA512 3d6bb2f67d499eccf2661da1389760d10830fc6e874d5f0686a78757aa9bcc2dcc85e77fdaf3877082d28ead26973ea7ad3717f3a18df5c5012a827b8aac4b13
- SSDEEP 3072:85r/KVugN4f1/q3dfwbQKcOekwmEWWIgDclq:4LKsg4wtfwMKScl
- TLSH T1C7B34C57A3E530F9F1B7867888510A46D772B8321B619FEF07A4429A2F236D18D3DF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_4298d688a227bd7109ca77ebb33e7463_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_4298d688a227bd7109ca77ebb33e7463_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_4298d688a227bd7109ca77ebb33e7463_cobalt-strike_icedid_satacom
- Size 110KB
- SHA256 ac9b7b408853ac2e636db150536bc9f580dfd0d97bbab4a0fff221251bbbb51a
- MD5 4298d688a227bd7109ca77ebb33e7463
- SHA1 d51821ce4617b416adfeee32d985caf36732c07c
- SHA512 3d6bb2f67d499eccf2661da1389760d10830fc6e874d5f0686a78757aa9bcc2dcc85e77fdaf3877082d28ead26973ea7ad3717f3a18df5c5012a827b8aac4b13
- SSDEEP 3072:85r/KVugN4f1/q3dfwbQKcOekwmEWWIgDclq:4LKsg4wtfwMKScl
- TLSH T1C7B34C57A3E530F9F1B7867888510A46D772B8321B619FEF07A4429A2F236D18D3DF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext