General

  • Target
    2026-08-12_f0f9e57aca45e85292369edbc34a58f3_cobalt-strike_icedid_satacom_stealc
  • Size 175KB
  • Sample260812-3tq2csfr2v
  • SHA256 af2b04b7e9b890dae934822cf516972adff6d02db72cca2122734a30118b0422
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-12_f0f9e57aca45e85292369edbc34a58f3_cobalt-strike_icedid_satacom_stealc
    • Size 175KB
    • SHA256 af2b04b7e9b890dae934822cf516972adff6d02db72cca2122734a30118b0422
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Xworm Payload

    • Detects NeptuneRAT stealer

    • Family: NeptuneRAT, MasonRAT

      NeptuneRAT aka MasonRAT is a trojan written in C#.

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

    • Detects Windows executables referencing non-Windows User-Agents

MITRE ATT&CK Matrix

Tasks