General
- Target 2026-08-19_d71379dd566b3a4eccbdff32e2632427_cobalt-strike_icedid_njrat_satacom_stealc
- Size 554KB
- Sample260819-ps6hrsfb22
- SHA256 5ff4fdf137278efb3a2a3647c67b7e420a814c1b68f25c7f63cf07e474b31770
- MD5 d71379dd566b3a4eccbdff32e2632427
- SHA1 c9ee1f0b53488e54af0281ea666ba833b8af9023
- SHA512 2ac77be87b23c573d6c65658d57579153a6f00880626acf87f7c28ed445df2032dccf15a54410a397a81a26f918f9e867433efe5fffcd397feded0e6af5c9f7d
- SSDEEP 12288:s7VlCTf18DzbRQsCtCjKymbeDPkI4kA03aR7:T1ibFjKymbgPMkAX
- TLSH T1CBC41911EAE403BDE2B7D3B4CA635905E677798607316ACB0390956B0F276D88F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-19_d71379dd566b3a4eccbdff32e2632427_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_d71379dd566b3a4eccbdff32e2632427_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_d71379dd566b3a4eccbdff32e2632427_cobalt-strike_icedid_njrat_satacom_stealc
- Size 554KB
- SHA256 5ff4fdf137278efb3a2a3647c67b7e420a814c1b68f25c7f63cf07e474b31770
- MD5 d71379dd566b3a4eccbdff32e2632427
- SHA1 c9ee1f0b53488e54af0281ea666ba833b8af9023
- SHA512 2ac77be87b23c573d6c65658d57579153a6f00880626acf87f7c28ed445df2032dccf15a54410a397a81a26f918f9e867433efe5fffcd397feded0e6af5c9f7d
- SSDEEP 12288:s7VlCTf18DzbRQsCtCjKymbeDPkI4kA03aR7:T1ibFjKymbgPMkAX
- TLSH T1CBC41911EAE403BDE2B7D3B4CA635905E677798607316ACB0390956B0F276D88F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Modifies security service
-
Windows security bypass
-
Detects executables containing artifacts associated with disabling Widnows Defender
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Windows security modification