General
- Target 2026-08-26_f1471a95777581ed8bceaded394d63e3_cobalt-strike_icedid_njrat_satacom
- Size 9.6MB
- Sample260827-dprdwsxtb1
- SHA256 270dddedec01e543cd138e8510a5b39e1de3fe05de9ab8227ec2caf1dd14b4ed
- MD5 f1471a95777581ed8bceaded394d63e3
- SHA1 f3e82ec89d789ccce13a42841816df51619d3956
- SHA512 ad78c6077497913a93fab9b3061d2947e2315400327e1f4b85d28b4687b858135b88f25a21cd2feb27199a523a6b1ca5d3a449bb94a3be153715aef38d996759
- SSDEEP 196608:CjG9du5MByU7VKCu/FCZOII+dmhvUUERJMXdqcWTAj8vJM8:iGamBp7VKx66+xUoMXsAj8C
- TLSH T1EAA623C2F75450A9DC3A8034C1934F12AA327C7DC3811BDB63CCFA296A537D15EAA65B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-26_f1471a95777581ed8bceaded394d63e3_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_f1471a95777581ed8bceaded394d63e3_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_f1471a95777581ed8bceaded394d63e3_cobalt-strike_icedid_njrat_satacom
- Size 9.6MB
- SHA256 270dddedec01e543cd138e8510a5b39e1de3fe05de9ab8227ec2caf1dd14b4ed
- MD5 f1471a95777581ed8bceaded394d63e3
- SHA1 f3e82ec89d789ccce13a42841816df51619d3956
- SHA512 ad78c6077497913a93fab9b3061d2947e2315400327e1f4b85d28b4687b858135b88f25a21cd2feb27199a523a6b1ca5d3a449bb94a3be153715aef38d996759
- SSDEEP 196608:CjG9du5MByU7VKCu/FCZOII+dmhvUUERJMXdqcWTAj8vJM8:iGamBp7VKx66+xUoMXsAj8C
- TLSH T1EAA623C2F75450A9DC3A8034C1934F12AA327C7DC3811BDB63CCFA296A537D15EAA65B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Suspicious use of NtSetInformationThreadHideFromDebugger