Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 07:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 188KB
- Sample260809-htye8awxa1
- SHA256 1e598ca950d5c8d55e795a44da5748d8abf03e30efc2e15f5d6784022ca14108
- MD5 1d64d1cb6bd2f032cd7fa970e8b9baca
- SHA1 431942ab75a21ab34c225bd1c9ba26527707b766
- SHA512 2193b7e7cb1a50f15991e3f566cfd49657382c146968a2855bbccf82254f0de1c5bee3462eccaf81cd18f7c601b0dac3392304ed1748cc3cc4c475fd021a58f2
- SSDEEP 3072:OhGhBtaUVOzK97O7frmhJwTPQVt9grubDm+qFE/gD1ol:OeBtaUVraKhJwT09yvP3ol
- TLSH T1DB145B15FAA500FAD2778578CA525A02FA73BC160770AACF43904BB69F276C49F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4920 2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4920 2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe 4920 2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_1d64d1cb6bd2f032cd7fa970e8b9baca_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4920