General
- Target 2026-08-15_93d2b56d456c3d48e1db3ed5e53e743e_cobalt-strike_icedid_njrat_satacom
- Size 8.8MB
- Sample260815-sgbe2ayelc
- SHA256 1434968facaa7eff00ec58f66469e82002bd5e09d26ff3a3fd4f3bfa75bf3698
- MD5 93d2b56d456c3d48e1db3ed5e53e743e
- SHA1 f73aff89f8a160f3cb2932fdd13450ed24e5199a
- SHA512 4f93731da96c158206a0be4924d8baaf1bbc38d2b42101f78f4cb4e13b330bdd83868ba31a2f6b42aefb355c96a31fbf360151b5d29ee21daf3e85ac3858aef6
- SSDEEP 196608:MG9dcylYZ7Gz2KCu/FCZOII+dmhvUUERJMXdqcWTAj8vJM8:MGwylsBKx66+xUoMXsAj8C
- TLSH T168962306F3A5847AC127913480C79F1BBA79BC60534257DB73CCAD287FA2BD04E7A694
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_93d2b56d456c3d48e1db3ed5e53e743e_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_93d2b56d456c3d48e1db3ed5e53e743e_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_93d2b56d456c3d48e1db3ed5e53e743e_cobalt-strike_icedid_njrat_satacom
- Size 8.8MB
- SHA256 1434968facaa7eff00ec58f66469e82002bd5e09d26ff3a3fd4f3bfa75bf3698
- MD5 93d2b56d456c3d48e1db3ed5e53e743e
- SHA1 f73aff89f8a160f3cb2932fdd13450ed24e5199a
- SHA512 4f93731da96c158206a0be4924d8baaf1bbc38d2b42101f78f4cb4e13b330bdd83868ba31a2f6b42aefb355c96a31fbf360151b5d29ee21daf3e85ac3858aef6
- SSDEEP 196608:MG9dcylYZ7Gz2KCu/FCZOII+dmhvUUERJMXdqcWTAj8vJM8:MGwylsBKx66+xUoMXsAj8C
- TLSH T168962306F3A5847AC127913480C79F1BBA79BC60534257DB73CCAD287FA2BD04E7A694
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Suspicious use of NtSetInformationThreadHideFromDebugger