b0e60fd332733f9682f9a6616b26a44700795e5a074626c8b319482d2bb88f30 | Triage™

Login
Reports

Overview

overview

Static

static

2026-08-10...lc.exe

windows10-2004-x64

9

2026-08-10...lc.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_73fab3a1e220a733aed1635cf8e1780a_cobalt-strike_icedid_njrat_satacom_stealc
Size 312KB
Sample260810-a89sssssez
SHA256 b0e60fd332733f9682f9a6616b26a44700795e5a074626c8b319482d2bb88f30
MD5 73fab3a1e220a733aed1635cf8e1780a
SHA1 670559b154477ee1417d6d0a2f6cfb610d4f88dc
SHA512 cf6550b766f454c77a2271c57c175432765a9c96e23c5e6d23fb8f40f1a8d5e86504f9a0e8a9aa4ad0ed9282db99ba5241e8e2818b4380d0dff0b6d9b643919d
SSDEEP 6144:aZUb5zwUR0pqa1xZrr9ih06LOxnbX8e8d:g9FdZiHLOxb5Y
TLSH
T122647D15F6A414F9EA77C23CCE424906EA72BC564761E6DF03904AA73F236E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion evasion execution impact ransomware spyware stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2026-08-10_73fab3a1e220a733aed1635cf8e1780a_cobalt-strike_icedid_njrat_satacom_stealc.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion evasion execution impact ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-08-10_73fab3a1e220a733aed1635cf8e1780a_cobalt-strike_icedid_njrat_satacom_stealc.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion evasion execution impact ransomware spyware stealer

Malware Config

Targets

- Target
  2026-08-10_73fab3a1e220a733aed1635cf8e1780a_cobalt-strike_icedid_njrat_satacom_stealc
- Size 312KB
- SHA256 b0e60fd332733f9682f9a6616b26a44700795e5a074626c8b319482d2bb88f30
- MD5 73fab3a1e220a733aed1635cf8e1780a
- SHA1 670559b154477ee1417d6d0a2f6cfb610d4f88dc
- SHA512 cf6550b766f454c77a2271c57c175432765a9c96e23c5e6d23fb8f40f1a8d5e86504f9a0e8a9aa4ad0ed9282db99ba5241e8e2818b4380d0dff0b6d9b643919d
- SSDEEP 6144:aZUb5zwUR0pqa1xZrr9ih06LOxnbX8e8d:g9FdZiHLOxb5Y
- TLSH
  T122647D15F6A414F9EA77C23CCE424906EA72BC564761E6DF03904AA73F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion evasion execution impact ransomware spyware stealer
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasionevasionexecutionimpactransomwarespywarestealer

behavioral2

defense_evasionevasionexecutionimpactransomwarespywarestealer

© 2018-2026

Terms | Privacy