General
- Target 2026-08-19_62d758522537978829f4d14aaaf12f51_cobalt-strike_icedid_njrat_satacom
- Size 165KB
- Sample260819-gaadlsdc37
- SHA256 8471013ab340ba41abe8ccb58dc0a8e1d8a8bca399aa41a337786f11b69f2a72
- MD5 62d758522537978829f4d14aaaf12f51
- SHA1 960dcb43b6ec08c004ba61b3ab6f011fde5484a8
- SHA512 a446597b109d614f37f20e3f6a40456510c8f54da575e689679dbb2b418c728a0881088643f3017124be2b2bdc4dcd9b1dac87f328ecf58df26fe34910fb2a45
- SSDEEP 3072:TQD4rNTe8fd2nYJhg1Qy5/oa65rqKMGAbRplyD:U6Bfd9JtCoaG6
- TLSH T1FEF38E56B7B510F9F5738139C9A21A06EB73782613209BEF03A04775AF237D19E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_62d758522537978829f4d14aaaf12f51_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_62d758522537978829f4d14aaaf12f51_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_62d758522537978829f4d14aaaf12f51_cobalt-strike_icedid_njrat_satacom
- Size 165KB
- SHA256 8471013ab340ba41abe8ccb58dc0a8e1d8a8bca399aa41a337786f11b69f2a72
- MD5 62d758522537978829f4d14aaaf12f51
- SHA1 960dcb43b6ec08c004ba61b3ab6f011fde5484a8
- SHA512 a446597b109d614f37f20e3f6a40456510c8f54da575e689679dbb2b418c728a0881088643f3017124be2b2bdc4dcd9b1dac87f328ecf58df26fe34910fb2a45
- SSDEEP 3072:TQD4rNTe8fd2nYJhg1Qy5/oa65rqKMGAbRplyD:U6Bfd9JtCoaG6
- TLSH T1FEF38E56B7B510F9F5738139C9A21A06EB73782613209BEF03A04775AF237D19E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.