General
- Target 2026-08-26_f0bc92486da7c86b5e19204d09ffc56e_cobalt-strike_icedid_satacom_stealc
- Size 220KB
- Sample260827-ds3w4axtex
- SHA256 a5552144ad4b149659461bc5d97a2a4127e55b022d25d2955bb9f73fe6b28b5f
- MD5 f0bc92486da7c86b5e19204d09ffc56e
- SHA1 0f896951f9eb464dd890a2eab6cf08b674f1d8c4
- SHA512 b573157c16086ffc4e5b3e9fbbae54d28d9429165528dfdd593426a8c40510c3a61db49f073b819c8e3ad554aa33799a322d84d71516973f1c256ac16a478074
- SSDEEP 3072:ngAd5TXJtydMxNGT4aSbQTcnfpOUTd39PmQxdpSLt6cng4ysboLmebROE:TrWT4JQY7xtb8LYcpCROE
- TLSH T113247D15B7A54CFAE6778979C9524505EA72BC1247A0FECF03A00A96CF237E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_f0bc92486da7c86b5e19204d09ffc56e_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_f0bc92486da7c86b5e19204d09ffc56e_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_f0bc92486da7c86b5e19204d09ffc56e_cobalt-strike_icedid_satacom_stealc
- Size 220KB
- SHA256 a5552144ad4b149659461bc5d97a2a4127e55b022d25d2955bb9f73fe6b28b5f
- MD5 f0bc92486da7c86b5e19204d09ffc56e
- SHA1 0f896951f9eb464dd890a2eab6cf08b674f1d8c4
- SHA512 b573157c16086ffc4e5b3e9fbbae54d28d9429165528dfdd593426a8c40510c3a61db49f073b819c8e3ad554aa33799a322d84d71516973f1c256ac16a478074
- SSDEEP 3072:ngAd5TXJtydMxNGT4aSbQTcnfpOUTd39PmQxdpSLt6cng4ysboLmebROE:TrWT4JQY7xtb8LYcpCROE
- TLSH T113247D15B7A54CFAE6778979C9524505EA72BC1247A0FECF03A00A96CF237E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.