General
- Target 2026-08-16_c09546281933faa563d111db28980dd5_cobalt-strike_icedid_njrat_satacom
- Size 136KB
- Sample260816-ebjmkaztes
- SHA256 c7d0a98f6a99cb32eab39b437c2581e90bb7ab50c51de415cb22737450bf7b4f
- MD5 c09546281933faa563d111db28980dd5
- SHA1 a72e2e14cf33db78b3a56a37da7c74c91c19f4d5
- SHA512 ccfaaa70fc9134895fd7e4847bb4a33d5b0d58e4b8f6322aa91dfc8169249a8416ceda7ba9841d1d954884d39cfb414012ada3970da4e1bc1a9414155cddf7be
- SSDEEP 3072:q6deDSHt2nGOix6VYIXOw0ABax91f9z1tfk7K1FK:qZicyI1Q91fhGsFK
- TLSH T1B7D35A5BB7E530F9E077963989614506EBB2B83107209BFF03A443662F236D19D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_c09546281933faa563d111db28980dd5_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_c09546281933faa563d111db28980dd5_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_c09546281933faa563d111db28980dd5_cobalt-strike_icedid_njrat_satacom
- Size 136KB
- SHA256 c7d0a98f6a99cb32eab39b437c2581e90bb7ab50c51de415cb22737450bf7b4f
- MD5 c09546281933faa563d111db28980dd5
- SHA1 a72e2e14cf33db78b3a56a37da7c74c91c19f4d5
- SHA512 ccfaaa70fc9134895fd7e4847bb4a33d5b0d58e4b8f6322aa91dfc8169249a8416ceda7ba9841d1d954884d39cfb414012ada3970da4e1bc1a9414155cddf7be
- SSDEEP 3072:q6deDSHt2nGOix6VYIXOw0ABax91f9z1tfk7K1FK:qZicyI1Q91fhGsFK
- TLSH T1B7D35A5BB7E530F9E077963989614506EBB2B83107209BFF03A443662F236D19D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext