3e24e4d80371b41927739a516ecb7c75fb414a76e505794be3a02d516de38bea

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 02:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_ac1cf72fafb858207f6b7e83f14329af_cobalt-strike_icedid_njrat_satacom.exe
Size 390KB
Sample260810-cj6e7as1e1
SHA256 3e24e4d80371b41927739a516ecb7c75fb414a76e505794be3a02d516de38bea
MD5 ac1cf72fafb858207f6b7e83f14329af
SHA1 cbe96f14f1b65d856b9d42dd2f7f818c30fef6d5
SHA512 80e5d76a323845e92a405f88778c2fa895c2c1433357066a672ba8a54439eaeea64b96b4f60bd69ad4a01ec7b6d6022a18cef8295ea527f0c20cbf8e9226243f
SSDEEP 6144:b0ek4v8+XkdExU7a54TVK7pYNJGdXNxCpeCrleQvtOjsmCUuvG3KD2/wM6:bX/v8YLxr7pYNJGdXNxCsCNzvFD
TLSH
T10B847D46F76409F9D17BE239CA564B16E9B27C0A4721E64F13AD43A60F233606D3FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

bootkit persistence

Malware Config

Signatures

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	2026-08-10_ac1cf72fafb858207f6b7e83f14329af_cobalt-strike_icedid_njrat_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_ac1cf72fafb858207f6b7e83f14329af_cobalt-strike_icedid_njrat_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_ac1cf72fafb858207f6b7e83f14329af_cobalt-strike_icedid_njrat_satacom.exe"
1⤵
- Writes to the Master Boot Record (MBR)
PID:4136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads