8cf016a998fbc6fa48c4b0001860b4674a273b3e8763cbfc25e54e67e0bb77c8

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 04:07

Target
2026-08-09_78eca75cbd59bab4f39fb56ceaa5fc54_cobalt-strike_icedid_njrat_satacom.exe
Size 247KB
Sample260809-eptdxszejd
SHA256 8cf016a998fbc6fa48c4b0001860b4674a273b3e8763cbfc25e54e67e0bb77c8
MD5 78eca75cbd59bab4f39fb56ceaa5fc54
SHA1 babb6c4693fee8c39ff70d84cefdab6d10124b61
SHA512 82cace66989dda4beb3400b2c9a94600b89d5fc0ab82d397303b80d9471e0fb535088df2531295c3012a65faddd88592399e604a6ea123510a728fcbaa9084e9
SSDEEP 6144:/C9KZbqlggXHY5lT3adHbLqWU3Vtxbey59sAO:q2WhoWd7Lq/tPcF
TLSH
T167348D1573A60CF9EC73923DC9529657EA7178150720DAEF03B04A6A2F232E0AD7F751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4564	2026-08-09_78eca75cbd59bab4f39fb56ceaa5fc54_cobalt-strike_icedid_njrat_satacom.exe
4564	2026-08-09_78eca75cbd59bab4f39fb56ceaa5fc54_cobalt-strike_icedid_njrat_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-09_78eca75cbd59bab4f39fb56ceaa5fc54_cobalt-strike_icedid_njrat_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_78eca75cbd59bab4f39fb56ceaa5fc54_cobalt-strike_icedid_njrat_satacom.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4564