General
- Target 2026-08-10_4a2f370e4ce4238c443ee2179c40d044_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.0MB
- Sample260810-bbfdcssshs
- SHA256 04a968b4e43d0c4248721abb2acf744f6f149cf0e92900793e9f59bfa7b3a3b9
- MD5 4a2f370e4ce4238c443ee2179c40d044
- SHA1 e899361e9478146e38b4b60f8d2896f2a0a7f5ff
- SHA512 dfdbf601330b5638d3380635845d52f9133336baef23279a6dbef6dfa22a49742be39ce4457cd8167bd386a17abe968df3c097aca5614ff5ec73b61cc15a69fc
- SSDEEP 49152:XdBXCamNvBrT/0hMPqR9U4oHApYpmgfVB60wLEvEz3Fs:fXUqvU4oKYQgfVALkx
- TLSH T1CBA5AF22EA5401ACD1B6D2F4EE275C03E672784A07356DDF03D0A9671F166E84B7FE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_4a2f370e4ce4238c443ee2179c40d044_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_4a2f370e4ce4238c443ee2179c40d044_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_4a2f370e4ce4238c443ee2179c40d044_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.0MB
- SHA256 04a968b4e43d0c4248721abb2acf744f6f149cf0e92900793e9f59bfa7b3a3b9
- MD5 4a2f370e4ce4238c443ee2179c40d044
- SHA1 e899361e9478146e38b4b60f8d2896f2a0a7f5ff
- SHA512 dfdbf601330b5638d3380635845d52f9133336baef23279a6dbef6dfa22a49742be39ce4457cd8167bd386a17abe968df3c097aca5614ff5ec73b61cc15a69fc
- SSDEEP 49152:XdBXCamNvBrT/0hMPqR9U4oHApYpmgfVB60wLEvEz3Fs:fXUqvU4oKYQgfVALkx
- TLSH T1CBA5AF22EA5401ACD1B6D2F4EE275C03E672784A07356DDF03D0A9671F166E84B7FE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Modifies boot configuration data using bcdedit