Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 08:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe
- Size 140KB
- Sample260815-kr54dssfkc
- SHA256 5f0613d03cd696185e80919c0939bd3a2036d1b4e62a95aab26e45d90f9440df
- MD5 db84dc518c74af8ffc888905f8d221fb
- SHA1 bf868a7178714928894c8aff8acadf24967ad4d0
- SHA512 327f0500b69c7a6ba0e698df3b8f35fa9a141268e0244e92fa551f608bd3e2a4672c65ea44abf211fd34f60100f2eff54852260e08d378f991a259b8fddddada
- SSDEEP 3072:rgd2e0YUftDQkvJV6C8ppcdCqiceKWQGBchtd6ka:USYUftFPUpcYqicP7Uka
- TLSH T177E35B57B3E631F9E067823988914545F776B83247708BEF07A447AA2F237D09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3196 2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe 3196 2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3196 2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-15_db84dc518c74af8ffc888905f8d221fb_cobalt-strike_icedid_njrat_satacom.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3196