General
- Target 2026-08-24_5f6fbfb67f2a7dfa9ab2c55c911c04bc_cobalt-strike_icedid_satacom
- Size 1.7MB
- Sample260825-pfl9csx1ht
- SHA256 5d3ffe997158a42634dc34409dae4295b84839ccc0a4e841fd0f573110dd6f90
- MD5 5f6fbfb67f2a7dfa9ab2c55c911c04bc
- SHA1 36b2cf4f1274154428db002be6065af1974dc297
- SHA512 db0d4ede3829ba0d66855eab69698668bebb8b66514863a18a86d9931e1b2b4948b761460b83df76ade260406b6d78033e3f91f3178176001825b9404b810676
- SSDEEP 24576:NKW6C8fMeatgyCY5m9np5/LeIStFA3WJ3F5ahOlTf9fIdxZ10mS6Bzk1S3H1nXRq:NK9C8fMRn5mhCI0FAt8Tf9fNya4h50
- TLSH T1EB858E2D9ED068F6E43FD5F6C850C880E87B62595B8D7BD94D801A8F6F0A365EC143AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_5f6fbfb67f2a7dfa9ab2c55c911c04bc_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_5f6fbfb67f2a7dfa9ab2c55c911c04bc_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_5f6fbfb67f2a7dfa9ab2c55c911c04bc_cobalt-strike_icedid_satacom
- Size 1.7MB
- SHA256 5d3ffe997158a42634dc34409dae4295b84839ccc0a4e841fd0f573110dd6f90
- MD5 5f6fbfb67f2a7dfa9ab2c55c911c04bc
- SHA1 36b2cf4f1274154428db002be6065af1974dc297
- SHA512 db0d4ede3829ba0d66855eab69698668bebb8b66514863a18a86d9931e1b2b4948b761460b83df76ade260406b6d78033e3f91f3178176001825b9404b810676
- SSDEEP 24576:NKW6C8fMeatgyCY5m9np5/LeIStFA3WJ3F5ahOlTf9fIdxZ10mS6Bzk1S3H1nXRq:NK9C8fMRn5mhCI0FAt8Tf9fNya4h50
- TLSH T1EB858E2D9ED068F6E43FD5F6C850C880E87B62595B8D7BD94D801A8F6F0A365EC143AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE