General

  • Target
    2026-08-15_3e0864e3e13958771e8ea80f5e92a080_cobalt-strike_icedid_njrat_satacom_stealc
  • Size 540KB
  • Sample260815-bzzf5swfqf
  • SHA256 a67f8bec4e5568fb68fcea78d1db88d082fde58f509712c341cf32fcf4c32b73
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-15_3e0864e3e13958771e8ea80f5e92a080_cobalt-strike_icedid_njrat_satacom_stealc
    • Size 540KB
    • SHA256 a67f8bec4e5568fb68fcea78d1db88d082fde58f509712c341cf32fcf4c32b73
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks