General
- Target 2026-08-15_39aff68aa4621c21e3bad7a1fd8bc530_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.2MB
- Sample260815-nezbvsvdmf
- SHA256 171c9b448d78eb52caefdda99f428369c1db01aa01e931e8953f307427db5965
- MD5 39aff68aa4621c21e3bad7a1fd8bc530
- SHA1 4b54236ef11e4d93f6c1d30e02f017fad72586d9
- SHA512 451d3215a52af282d4bcac12cca573b1fb24fea668d66d7fae29758ad9112d09d4d5785543a65123e56f9e010cf2d8685d92c1450dcd9329645773bfe3a37fd8
- SSDEEP 24576:K98v3FD4LWEFLmGA+QjoXiOmZ0VzPnnAk6X:3VELRdA+QcXiOieLn
- TLSH T1F3B545C9C9099956EC94E1ACB409C58EC12BAEF35E2E32B763C4C41637464F8F5636B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-15_39aff68aa4621c21e3bad7a1fd8bc530_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_39aff68aa4621c21e3bad7a1fd8bc530_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_39aff68aa4621c21e3bad7a1fd8bc530_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.2MB
- SHA256 171c9b448d78eb52caefdda99f428369c1db01aa01e931e8953f307427db5965
- MD5 39aff68aa4621c21e3bad7a1fd8bc530
- SHA1 4b54236ef11e4d93f6c1d30e02f017fad72586d9
- SHA512 451d3215a52af282d4bcac12cca573b1fb24fea668d66d7fae29758ad9112d09d4d5785543a65123e56f9e010cf2d8685d92c1450dcd9329645773bfe3a37fd8
- SSDEEP 24576:K98v3FD4LWEFLmGA+QjoXiOmZ0VzPnnAk6X:3VELRdA+QcXiOieLn
- TLSH T1F3B545C9C9099956EC94E1ACB409C58EC12BAEF35E2E32B763C4C41637464F8F5636B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger