General
- Target 2026-08-08_61ac311c5f39bafa7ec2a84fb4444432_cobalt-strike_icedid_satacom
- Size 10.1MB
- Sample260808-hvvqqasdlc
- SHA256 5770419fca0166f5526283894d3a4a355bd5f464f0a6f758a1551fd460f29645
- MD5 61ac311c5f39bafa7ec2a84fb4444432
- SHA1 6f842535ed34949385e29dfea36f83851bac8a5e
- SHA512 4ee11cefbcff5f3e65bd817daa45bbb34134e14b7a8bdf88cfbbfd17605df6b5daa7289b0147f56d8b71abb4acd091a33a518cd0b041753c67c9d0693d5cfec9
- SSDEEP 196608:iZdXDh95yF7FDgQcAy4z/7Ie1Ei7+qWuV3xzor:yXDhCRFDgQcp4z/z6Od
- TLSH T134B6AE52E2E921E9D6BBC179C65A461BEBF1B81513305BCF01A0CA595F33BE06B3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_61ac311c5f39bafa7ec2a84fb4444432_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_61ac311c5f39bafa7ec2a84fb4444432_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_61ac311c5f39bafa7ec2a84fb4444432_cobalt-strike_icedid_satacom
- Size 10.1MB
- SHA256 5770419fca0166f5526283894d3a4a355bd5f464f0a6f758a1551fd460f29645
- MD5 61ac311c5f39bafa7ec2a84fb4444432
- SHA1 6f842535ed34949385e29dfea36f83851bac8a5e
- SHA512 4ee11cefbcff5f3e65bd817daa45bbb34134e14b7a8bdf88cfbbfd17605df6b5daa7289b0147f56d8b71abb4acd091a33a518cd0b041753c67c9d0693d5cfec9
- SSDEEP 196608:iZdXDh95yF7FDgQcAy4z/7Ie1Ei7+qWuV3xzor:yXDhCRFDgQcp4z/z6Od
- TLSH T134B6AE52E2E921E9D6BBC179C65A461BEBF1B81513305BCF01A0CA595F33BE06B3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext