General
- Target 2026-08-14_6370a5c6fb2494cf2be8ef342f314553_cobalt-strike_icedid_satacom
- Size 2.9MB
- Sample260814-qtlenacn2t
- SHA256 bfa0bb53a0adb039d2752722e687dfd6ccd8fa2b456a287ab8de720b0720db4d
- MD5 6370a5c6fb2494cf2be8ef342f314553
- SHA1 412cf3dc30b742d6e325834b4dff265d413d2505
- SHA512 5f413c486918f2e3c45697ead773f85f7b75cc3c3af92d531223577b0f5cd5990a1fdb3524ec1a31915df08897e91a253090617d633990eb6f1de958044d96a4
- SSDEEP 49152:ZCOzg5gzppPSQ86+mCDW/baDiTUme82iAR5WTcbwdg+LQC7eJqpR+KZ8h:1tRgbPCjaulL23WTcbk7eJqpoe8h
- TLSH T1EBE53375B38504EEE4E2413E01B6879395A27CD5BFD12AEF4674C4241F623E60E3A7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_6370a5c6fb2494cf2be8ef342f314553_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_6370a5c6fb2494cf2be8ef342f314553_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_6370a5c6fb2494cf2be8ef342f314553_cobalt-strike_icedid_satacom
- Size 2.9MB
- SHA256 bfa0bb53a0adb039d2752722e687dfd6ccd8fa2b456a287ab8de720b0720db4d
- MD5 6370a5c6fb2494cf2be8ef342f314553
- SHA1 412cf3dc30b742d6e325834b4dff265d413d2505
- SHA512 5f413c486918f2e3c45697ead773f85f7b75cc3c3af92d531223577b0f5cd5990a1fdb3524ec1a31915df08897e91a253090617d633990eb6f1de958044d96a4
- SSDEEP 49152:ZCOzg5gzppPSQ86+mCDW/baDiTUme82iAR5WTcbwdg+LQC7eJqpR+KZ8h:1tRgbPCjaulL23WTcbk7eJqpoe8h
- TLSH T1EBE53375B38504EEE4E2413E01B6879395A27CD5BFD12AEF4674C4241F623E60E3A7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.