General
- Target 2026-08-23_7ee60f0f6f56934ca23a5cdc31c56a43_cobalt-strike_icedid_njrat_satacom_stealc
- Size 542KB
- Sample260824-jm4t4ace35
- SHA256 cf34e5ba485943b1b32fa160ae49c8a8c2cd9645fdf440bde92e8e92640fe16c
- MD5 7ee60f0f6f56934ca23a5cdc31c56a43
- SHA1 57965382c545379ab1cb26d6667d2a32cd6c1145
- SHA512 e9697a4ddc75663c10009141215bcae4195ff6e8def5185a18bf143e9c61b9a46ed3f7fa62dd0c00dfe4cf208d9b6ab61cc2fddcdb01a4b53efffec16a427f8d
- SSDEEP 6144:2Xr1UFLGY40DGGbfuTGojT6OWdlUs3Z098eAJUHEBIC3J2BeYosNenCMzoyKJA9:1GOuTGojT6JdlU/On1dS1osuM9y
- TLSH T1E7C48D58B5A413F9E17AC274CE879503F7B2B8481370AADF03E189771F236A15A3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_7ee60f0f6f56934ca23a5cdc31c56a43_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_7ee60f0f6f56934ca23a5cdc31c56a43_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_7ee60f0f6f56934ca23a5cdc31c56a43_cobalt-strike_icedid_njrat_satacom_stealc
- Size 542KB
- SHA256 cf34e5ba485943b1b32fa160ae49c8a8c2cd9645fdf440bde92e8e92640fe16c
- MD5 7ee60f0f6f56934ca23a5cdc31c56a43
- SHA1 57965382c545379ab1cb26d6667d2a32cd6c1145
- SHA512 e9697a4ddc75663c10009141215bcae4195ff6e8def5185a18bf143e9c61b9a46ed3f7fa62dd0c00dfe4cf208d9b6ab61cc2fddcdb01a4b53efffec16a427f8d
- SSDEEP 6144:2Xr1UFLGY40DGGbfuTGojT6OWdlUs3Z098eAJUHEBIC3J2BeYosNenCMzoyKJA9:1GOuTGojT6JdlU/On1dS1osuM9y
- TLSH T1E7C48D58B5A413F9E17AC274CE879503F7B2B8481370AADF03E189771F236A15A3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.