Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 18:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 334KB
- Sample260809-w2e6hatcqd
- SHA256 867981d56407a209f67110e4746ad56165947e7862d276de673943a8f9213723
- MD5 8c07a430b1097be1e29a4961ad482077
- SHA1 c87fbd9b75fcb409581bbf92ce6c893e0fa097e3
- SHA512 12a4abf694db390fd98d1bbdbfe66db04e5e29d7708d48ee2acccdfb4b580d31ac549ea03157416c01affa3cb6b7db8c9634a62f19eb7261ef93bc81b0cd8fe7
- SSDEEP 3072:9rpMM6xrdUa09f4ua0w/YlJE1X6P9MufHpNIkOFHm820mCTBdkV90KQpvoiLam0P:TEWzMxFG82zG+6Rsz8LVpFrCps4B
- TLSH T1EC744C4AFAA524F5E5BBC13CC542550AFAB13C6243709BCB67904A572F23BE4AE3D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4864 2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe 4864 2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_8c07a430b1097be1e29a4961ad482077_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4864
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Programs\_3103652625\Configuration\fedrometadata.dll
- Size 1.8MB
- SHA256 15ec212ea7753b907bc171e10d649e8275b0dc648ef15ce7a33461a3466d3516
- MD5 ca582529da408164f6b8128ac5b72f16
- SHA1 66b2b05270405f3cfbe0dd7c9daba9642e46384c
- SHA512 f0521c10c4c903e3b9ddf898a5f100173b7803eb7487bbf1d692801fe7c8464164200addec9139334751e311a45dd4320f1d0ebadabe48c1e180cf4acb87c6e2
- SSDEEP 24576:qhnaW/ElKdcMATPTnUci2Rkq5l8U0TJJBwuCx5WA2U4IgL5pZ5:qQW/El0c7fUciLq4LJBwuOKU4I6
- TLSH T18D856C1DB6688095C87A4235C887C3658AB17C315B2066DB32D4FF7FBA33BE1663A705
- MD5 SHA1 SHA512 SSDEEP TLSH