General
- Target 2026-08-12_f0f9e57aca45e85292369edbc34a58f3_cobalt-strike_icedid_satacom_stealc
- Size 175KB
- Sample260812-3tq2csfr2v
- SHA256 af2b04b7e9b890dae934822cf516972adff6d02db72cca2122734a30118b0422
- MD5 f0f9e57aca45e85292369edbc34a58f3
- SHA1 32f906c0d9d091835668c3ca1072047483a38fcf
- SHA512 1d629b2e1cdfb300e026f21670d7c71e87337ccbc6ecbb68770780a04d7ae87426f85c0d0caeacf3d05bdca68bcac6d6c64e2a7058176f3f2bb24248e83bb137
- SSDEEP 3072:8a7j1B4TL8nJHgMocy2KVdRiSqofN3NGq+BPxSYZhjn03Ovf5CWBIIE+k:u/AJty2qdRkodNGq+pxhD0eCW2V5
- TLSH T125048E577AA570F9E177C279C0935600D7727C761B60ABDF07A087962F232E18D3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_f0f9e57aca45e85292369edbc34a58f3_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_f0f9e57aca45e85292369edbc34a58f3_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f0f9e57aca45e85292369edbc34a58f3_cobalt-strike_icedid_satacom_stealc
- Size 175KB
- SHA256 af2b04b7e9b890dae934822cf516972adff6d02db72cca2122734a30118b0422
- MD5 f0f9e57aca45e85292369edbc34a58f3
- SHA1 32f906c0d9d091835668c3ca1072047483a38fcf
- SHA512 1d629b2e1cdfb300e026f21670d7c71e87337ccbc6ecbb68770780a04d7ae87426f85c0d0caeacf3d05bdca68bcac6d6c64e2a7058176f3f2bb24248e83bb137
- SSDEEP 3072:8a7j1B4TL8nJHgMocy2KVdRiSqofN3NGq+BPxSYZhjn03Ovf5CWBIIE+k:u/AJty2qdRkodNGq+pxhD0eCW2V5
- TLSH T125048E577AA570F9E177C279C0935600D7727C761B60ABDF07A087962F232E18D3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect Xworm Payload
-
Detects NeptuneRAT stealer
-
Detects Windows executables referencing non-Windows User-Agents