Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/08/2026, 03:45

General

  • Target
    2026-08-20_8a05d3fac593e08ca2f3ce9a2a91f0e2_cobalt-strike_icedid_njrat_satacom_stealc.exe
  • Size 1.7MB
  • Sample260820-ea4w4sssbs
  • SHA256 c1b3e0b850906b9427f8ddb964f6033be58807b0ba8cc1153e9ffcfa3311f5e9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-20_8a05d3fac593e08ca2f3ce9a2a91f0e2_cobalt-strike_icedid_njrat_satacom_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-20_8a05d3fac593e08ca2f3ce9a2a91f0e2_cobalt-strike_icedid_njrat_satacom_stealc.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:7068

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/7068-0-0x0000000140000000-0x00000001401B5000-memory.dmp

        memory/7068-1-0x00007FFC6282F000-0x00007FFC62830000-memory.dmp

        memory/7068-2-0x00000000026A0000-0x00000000026DA000-memory.dmp

        memory/7068-3-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-4-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-5-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-6-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-7-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-8-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-9-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-10-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-11-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-12-0x0000000021130000-0x0000000021138000-memory.dmp

        memory/7068-14-0x00000000211C0000-0x00000000211CE000-memory.dmp

        memory/7068-13-0x0000000021180000-0x00000000211BE000-memory.dmp

        memory/7068-18-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-19-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-20-0x0000000022A10000-0x0000000022A50000-memory.dmp

        memory/7068-22-0x0000000140000000-0x00000001401B5000-memory.dmp

        memory/7068-23-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-24-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-25-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-26-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-27-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp

        memory/7068-28-0x00007FFC626A0000-0x00007FFC63044000-memory.dmp