General
- Target 2026-08-15_3e0864e3e13958771e8ea80f5e92a080_cobalt-strike_icedid_njrat_satacom_stealc
- Size 540KB
- Sample260815-bzzf5swfqf
- SHA256 a67f8bec4e5568fb68fcea78d1db88d082fde58f509712c341cf32fcf4c32b73
- MD5 3e0864e3e13958771e8ea80f5e92a080
- SHA1 43197f10f0454189030ed7fa6da82f4750d1f0ab
- SHA512 c487132b2ea82aae4660551fdfaade0b3977cb41688fce7af769835690ceec42b53a0628a60d63a37db62928002616e79d4f704d84ceb78bb064aadd012e6b48
- SSDEEP 6144:dtjeQjojjJK5pGtYAEfzgsb0/0MJgllReuNzA7EX5ZY64ZIdr3y9hyFFcK2/xmNm:fc3UpGtGs10MJaRt4J8iuT6B
- TLSH T1C5C49E1AF76484EBD523967CC883D616D670BC011B2497CF27A06ADB6F33AD46D3AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_3e0864e3e13958771e8ea80f5e92a080_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_3e0864e3e13958771e8ea80f5e92a080_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_3e0864e3e13958771e8ea80f5e92a080_cobalt-strike_icedid_njrat_satacom_stealc
- Size 540KB
- SHA256 a67f8bec4e5568fb68fcea78d1db88d082fde58f509712c341cf32fcf4c32b73
- MD5 3e0864e3e13958771e8ea80f5e92a080
- SHA1 43197f10f0454189030ed7fa6da82f4750d1f0ab
- SHA512 c487132b2ea82aae4660551fdfaade0b3977cb41688fce7af769835690ceec42b53a0628a60d63a37db62928002616e79d4f704d84ceb78bb064aadd012e6b48
- SSDEEP 6144:dtjeQjojjJK5pGtYAEfzgsb0/0MJgllReuNzA7EX5ZY64ZIdr3y9hyFFcK2/xmNm:fc3UpGtGs10MJaRt4J8iuT6B
- TLSH T1C5C49E1AF76484EBD523967CC883D616D670BC011B2497CF27A06ADB6F33AD46D3AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application