General
- Target 2026-08-25_637ed9e29e0fa390c535cbc0259246a2_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample260826-3cf5tsvyey
- SHA256 246f39a5381605bdf8076638fcfdb9bc1342ed06ab76732131ce00284a4162c9
- MD5 637ed9e29e0fa390c535cbc0259246a2
- SHA1 277f558dad279ec32c4b2f78317c41c3a4308eee
- SHA512 a4a20b6f578b9e976be4da05411005dea490781e991380e874241f39bda77674857a5f1c52a55aef9d9cf93a82a86dec7fbf9fc1bdf57e4d197827f3b0908c80
- SSDEEP 49152:uwUVnU3ekSGnhplujKn3+N75OKtnLlGB0uw2tjjxKGe/+ubtNkjS3Zc:7nhX5nuVJGB0B2tjo5xXkW3C
- TLSH T1E1C5121166E5006CE1A3D6B4CDA7910CDB37B8C68734AACB23D8189B4F73AC51D3E766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_637ed9e29e0fa390c535cbc0259246a2_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_637ed9e29e0fa390c535cbc0259246a2_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_637ed9e29e0fa390c535cbc0259246a2_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 246f39a5381605bdf8076638fcfdb9bc1342ed06ab76732131ce00284a4162c9
- MD5 637ed9e29e0fa390c535cbc0259246a2
- SHA1 277f558dad279ec32c4b2f78317c41c3a4308eee
- SHA512 a4a20b6f578b9e976be4da05411005dea490781e991380e874241f39bda77674857a5f1c52a55aef9d9cf93a82a86dec7fbf9fc1bdf57e4d197827f3b0908c80
- SSDEEP 49152:uwUVnU3ekSGnhplujKn3+N75OKtnLlGB0uw2tjjxKGe/+ubtNkjS3Zc:7nhX5nuVJGB0B2tjo5xXkW3C
- TLSH T1E1C5121166E5006CE1A3D6B4CDA7910CDB37B8C68734AACB23D8189B4F73AC51D3E766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Modifies security service
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL