Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 16:53

General

  • Target
    2026-08-09_4a072c4ee793fd5622f24469dfb811ea_cobalt-strike_icedid_satacom.exe
  • Size 1.7MB
  • Sample260809-vedtgssbqf
  • SHA256 ecb8afa9787e5a41bc90c35ab791cbe2bd51d69242659eaa00ef5ce2c2d7286b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-09_4a072c4ee793fd5622f24469dfb811ea_cobalt-strike_icedid_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-09_4a072c4ee793fd5622f24469dfb811ea_cobalt-strike_icedid_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4768
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:1356
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:236
      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
        1⤵
          PID:3104
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:3720

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                memory/4768-0-0x000001B178A40000-0x000001B178B8F000-memory.dmp

                memory/4768-1-0x000001B1788C0000-0x000001B1788C4000-memory.dmp

                memory/4768-2-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-8-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-15-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-17-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-16-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-14-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-12-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-13-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-11-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-10-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-9-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-7-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-6-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-18-0x000001B17A670000-0x000001B17A7E1000-memory.dmp

                memory/4768-19-0x000001B17A670000-0x000001B17A7E1000-memory.dmp