General
- Target 2026-08-10_a4ac7d04a9ded4d1fd02e1d5af6f9829_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.7MB
- Sample260810-n2ynvafg99
- SHA256 2339d1a1e361c1a1da088487c061e980f0593b11e55b30c093d99f53ef3fff96
- MD5 a4ac7d04a9ded4d1fd02e1d5af6f9829
- SHA1 ae65007b76f9f2ff2d396ff596361798fbb4a262
- SHA512 8bd2ce8cac54d24222b1173d3bf78f343424f83fbc3ef9f8d4ff6a1ce2e309d4a190257f2f1edd5df3e7ce6543b1f9992ea213b5884493d1ceab488e851790cc
- SSDEEP 49152:+XSqHKDZjii+hKa3n/fHlK9KcCTTR4fLPTdHZf6rRO89zo3BYxtyKEqFJnSup9iC:GqD9WfFK9ZCTT8JZCE89z06GK5FJnSU
- TLSH T183060102E2E4C1F8D077D27CCA635A4BEBB6382457305ADF53C8595A1F27AE08A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_a4ac7d04a9ded4d1fd02e1d5af6f9829_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_a4ac7d04a9ded4d1fd02e1d5af6f9829_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_a4ac7d04a9ded4d1fd02e1d5af6f9829_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.7MB
- SHA256 2339d1a1e361c1a1da088487c061e980f0593b11e55b30c093d99f53ef3fff96
- MD5 a4ac7d04a9ded4d1fd02e1d5af6f9829
- SHA1 ae65007b76f9f2ff2d396ff596361798fbb4a262
- SHA512 8bd2ce8cac54d24222b1173d3bf78f343424f83fbc3ef9f8d4ff6a1ce2e309d4a190257f2f1edd5df3e7ce6543b1f9992ea213b5884493d1ceab488e851790cc
- SSDEEP 49152:+XSqHKDZjii+hKa3n/fHlK9KcCTTR4fLPTdHZf6rRO89zo3BYxtyKEqFJnSup9iC:GqD9WfFK9ZCTT8JZCE89z06GK5FJnSU
- TLSH T183060102E2E4C1F8D077D27CCA635A4BEBB6382457305ADF53C8595A1F27AE08A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Detects executables referencing many IR and analysis tools
-
Deletes itself
-
Executes dropped EXE