General
- Target 2026-08-17_209d111981d5298a7e25996be43970a2_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.8MB
- Sample260818-a2pt2sbr7t
- SHA256 3945b10cafa500276686ad8a3ceab6a7f28813896c422c474d898502c22a77a9
- MD5 209d111981d5298a7e25996be43970a2
- SHA1 9cbb6d60d137633aec1ff0f13d06c552d1101a5b
- SHA512 48518d9a7da79fdc427cdc2a56f11e37c23503d66480972c2099b81952b21d2dd5db5e6eed0bac59f5b0c8abe83da2c09a030dca4b7c920ec25b369805287bf2
- SSDEEP 49152:LYRZqGQj1Au8LHE3YK3493PMCWyeIcsdrSrLUqqsnnwP:Sj8cEU+yeIcd0qqs
- TLSH T1EDD5AE8163861792E43AC1FB5E5BB213F9B538890B2147D7EBC818535E725F20D37A8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_209d111981d5298a7e25996be43970a2_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_209d111981d5298a7e25996be43970a2_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_209d111981d5298a7e25996be43970a2_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.8MB
- SHA256 3945b10cafa500276686ad8a3ceab6a7f28813896c422c474d898502c22a77a9
- MD5 209d111981d5298a7e25996be43970a2
- SHA1 9cbb6d60d137633aec1ff0f13d06c552d1101a5b
- SHA512 48518d9a7da79fdc427cdc2a56f11e37c23503d66480972c2099b81952b21d2dd5db5e6eed0bac59f5b0c8abe83da2c09a030dca4b7c920ec25b369805287bf2
- SSDEEP 49152:LYRZqGQj1Au8LHE3YK3493PMCWyeIcsdrSrLUqqsnnwP:Sj8cEU+yeIcd0qqs
- TLSH T1EDD5AE8163861792E43AC1FB5E5BB213F9B538890B2147D7EBC818535E725F20D37A8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger