General
- Target 2026-08-08_c354609a2dba78ddca737f9f8a8fa418_cobalt-strike_icedid_satacom
- Size 107KB
- Sample260808-htmcysbl4y
- SHA256 4dd4cfd9946fac904bdd27f5b8084e0dd6cd6191e8dd9b69c53a93acd0e3cd11
- MD5 c354609a2dba78ddca737f9f8a8fa418
- SHA1 8693ad6fbbf71432f24cc1dcb8a440043621a9bf
- SHA512 46c56e15263c6e21a05efb5e706e24e6b2d39fe8930c5e5a7e84331a96b2f83191dde153a20dea581d2a3c4178792dbb1cbdaf2c5b7d00f531f90b139370b4ba
- SSDEEP 3072:3n7XnKqrYsAOMiaaRVweNrvSfTZuWGKvZzY:3TnKq6i1RVHdvnKvx
- TLSH T19DB37C5BA3A530F9E17B9638C4610A85E772B83217619FEF03B4429A1F236D18D3DF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_c354609a2dba78ddca737f9f8a8fa418_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_c354609a2dba78ddca737f9f8a8fa418_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_c354609a2dba78ddca737f9f8a8fa418_cobalt-strike_icedid_satacom
- Size 107KB
- SHA256 4dd4cfd9946fac904bdd27f5b8084e0dd6cd6191e8dd9b69c53a93acd0e3cd11
- MD5 c354609a2dba78ddca737f9f8a8fa418
- SHA1 8693ad6fbbf71432f24cc1dcb8a440043621a9bf
- SHA512 46c56e15263c6e21a05efb5e706e24e6b2d39fe8930c5e5a7e84331a96b2f83191dde153a20dea581d2a3c4178792dbb1cbdaf2c5b7d00f531f90b139370b4ba
- SSDEEP 3072:3n7XnKqrYsAOMiaaRVweNrvSfTZuWGKvZzY:3TnKq6i1RVHdvnKvx
- TLSH T19DB37C5BA3A530F9E17B9638C4610A85E772B83217619FEF03B4429A1F236D18D3DF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext