Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 18:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 334KB
- Sample260809-w2e6hatcqd
- SHA256 867981d56407a209f67110e4746ad56165947e7862d276de673943a8f9213723
- MD5 8c07a430b1097be1e29a4961ad482077
- SHA1 c87fbd9b75fcb409581bbf92ce6c893e0fa097e3
- SHA512 12a4abf694db390fd98d1bbdbfe66db04e5e29d7708d48ee2acccdfb4b580d31ac549ea03157416c01affa3cb6b7db8c9634a62f19eb7261ef93bc81b0cd8fe7
- SSDEEP 3072:9rpMM6xrdUa09f4ua0w/YlJE1X6P9MufHpNIkOFHm820mCTBdkV90KQpvoiLam0P:TEWzMxFG82zG+6Rsz8LVpFrCps4B
- TLSH T1EC744C4AFAA524F5E5BBC13CC542550AFAB13C6243709BCB67904A572F23BE4AE3D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3132 2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe 3132 2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3132
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Programs\_657388103\SystemResetPlatform\fedtttracer.exe
- Size 1.6MB
- SHA256 a1331a9b4c8cca6ccdda97efa7b57fe249cb1753b0ee9c212a41856866c21b23
- MD5 f804d60514ec31233e6df99949b7ff1e
- SHA1 96d48b58e741a33d6729d4d2ae57f7f52a0d4961
- SHA512 fa60f5ea399a316946dd35c0c346ff6cf19e76d905055f4473f11edd47dae937efe2482ef4a0bb435aaf68d4aa29ead23c538231f66d2a58499d79547341f58a
- SSDEEP 24576:TNjNU+J4wogYQIA4wPrfZk9BFAoUXlJJBwuCx59U4IgL5pQ:h94wogYQIA4qrfqIokPJBwuOTU4IJ
- TLSH T125855B1EB768C096C83A42358853C275D6B17C305B6066DB62D0FB7FBA33BD16A3A705
- MD5 SHA1 SHA512 SSDEEP TLSH