General
- Target 2026-08-09_6184bdb2773c6d4d564caf9f1da4ed76_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.7MB
- Sample260809-k5fqnavblc
- SHA256 15194686f4b2651923a3f223c37c47a76f3f926fddd80ddcee923edbff7dba8c
- MD5 6184bdb2773c6d4d564caf9f1da4ed76
- SHA1 48e3455495c8a37d2230623309854c36d7041210
- SHA512 8aeb6dfbedcb7b44cba8c67741560f8e8d45fdd549ebb885cd0300651ef72759710a1b3a300ad7d1573d90ff296dc43054065c7cae565be50ea2ea2f6ec4b5bf
- SSDEEP 24576:cmIHXMM3bwtz4SHalNDz3BqhTq8wwLP4LuoEfN36x3C49Mas+9cx4Kx/X5Oz3E8P:cmI3MM3bZSHa6dW9K/M
- TLSH T183D5E84BEAB690E0D4FAD139C252A62BFD713C5DC234A7579B81DB174B62B60D83E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
7 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6184bdb2773c6d4d564caf9f1da4ed76_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6184bdb2773c6d4d564caf9f1da4ed76_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6184bdb2773c6d4d564caf9f1da4ed76_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.7MB
- SHA256 15194686f4b2651923a3f223c37c47a76f3f926fddd80ddcee923edbff7dba8c
- MD5 6184bdb2773c6d4d564caf9f1da4ed76
- SHA1 48e3455495c8a37d2230623309854c36d7041210
- SHA512 8aeb6dfbedcb7b44cba8c67741560f8e8d45fdd549ebb885cd0300651ef72759710a1b3a300ad7d1573d90ff296dc43054065c7cae565be50ea2ea2f6ec4b5bf
- SSDEEP 24576:cmIHXMM3bwtz4SHalNDz3BqhTq8wwLP4LuoEfN36x3C49Mas+9cx4Kx/X5Oz3E8P:cmI3MM3bZSHa6dW9K/M
- TLSH T183D5E84BEAB690E0D4FAD139C252A62BFD713C5DC234A7579B81DB174B62B60D83E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.