General

  • Target
    2026-08-19_d71379dd566b3a4eccbdff32e2632427_cobalt-strike_icedid_njrat_satacom_stealc
  • Size 554KB
  • Sample260819-ps6hrsfb22
  • SHA256 5ff4fdf137278efb3a2a3647c67b7e420a814c1b68f25c7f63cf07e474b31770
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-19_d71379dd566b3a4eccbdff32e2632427_cobalt-strike_icedid_njrat_satacom_stealc
    • Size 554KB
    • SHA256 5ff4fdf137278efb3a2a3647c67b7e420a814c1b68f25c7f63cf07e474b31770
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Modifies Windows Defender TamperProtection settings

    • Modifies security service

    • Windows security bypass

    • Detects executables containing artifacts associated with disabling Widnows Defender

    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Executes dropped EXE

    • Windows security modification

MITRE ATT&CK Enterprise v16

Tasks