General
- Target 2026-08-19_ecc59b85d9b4ed5a611da09cd865d891_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.3MB
- Sample260819-ehe8qawdqe
- SHA256 17b53ef84b5cca3d8a532ba71ec837ab0495383200a00db1244a07028ed0971e
- MD5 ecc59b85d9b4ed5a611da09cd865d891
- SHA1 8efbb44297c06f7c6e9e85853578fd680ee1ee38
- SHA512 374c006b65af36357af0d5bc7f32187fc82aae6dccae39e7dc0fa430d4a41d3aec5d7694d904bb0b5c67413804dc4b6d7100f8a969a86ddedf5cab900eb54f72
- SSDEEP 24576:q6+dOGM5SQ5GxqCAhlIYEP+pOmIvEuiaRnnN:q68ObkxqCLGUogn
- TLSH T12455BF4D73B841F8D1ABD1B9DA91590BFB357419073089EB83E40A182F63BE49E7B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ecc59b85d9b4ed5a611da09cd865d891_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ecc59b85d9b4ed5a611da09cd865d891_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ecc59b85d9b4ed5a611da09cd865d891_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.3MB
- SHA256 17b53ef84b5cca3d8a532ba71ec837ab0495383200a00db1244a07028ed0971e
- MD5 ecc59b85d9b4ed5a611da09cd865d891
- SHA1 8efbb44297c06f7c6e9e85853578fd680ee1ee38
- SHA512 374c006b65af36357af0d5bc7f32187fc82aae6dccae39e7dc0fa430d4a41d3aec5d7694d904bb0b5c67413804dc4b6d7100f8a969a86ddedf5cab900eb54f72
- SSDEEP 24576:q6+dOGM5SQ5GxqCAhlIYEP+pOmIvEuiaRnnN:q68ObkxqCLGUogn
- TLSH T12455BF4D73B841F8D1ABD1B9DA91590BFB357419073089EB83E40A182F63BE49E7B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1