General
- Target 2026-08-29_fc9330805185798b74a2dd5203645e23_cobalt-strike_icedid_satacom_stealc
- Size 190KB
- Sample260830-2wvlwstwgs
- SHA256 1ef00980f794451c89c25238eeb4af55c0741c57568a7e4395bd60ff9c37c386
- MD5 fc9330805185798b74a2dd5203645e23
- SHA1 3d5f25f87f9fc72a392f0dbdb66dc7fc12abc44e
- SHA512 2d83b047ac952c5f384d2c0f11f5ecfb2618b8395ec5c3373e0094bb1a925896e215479f152e42e4b0cca6c5a95fba6db1bf55a0125f28528fca625609983eac
- SSDEEP 3072:MyLxQ6teZeygXKH/oI/rHzdkhl7KUxjJoSQwAEfZqPYwhND3h31ZB01QgosTz6Xu:MyLxQ6tTyg6H/3rTdk37fozwAEfZqwYQ
- TLSH T16B145D15F65940FAE2778538C9920A01FB73BC520770AADF07904AFA9F276D1AE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-29_fc9330805185798b74a2dd5203645e23_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-29_fc9330805185798b74a2dd5203645e23_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-29_fc9330805185798b74a2dd5203645e23_cobalt-strike_icedid_satacom_stealc
- Size 190KB
- SHA256 1ef00980f794451c89c25238eeb4af55c0741c57568a7e4395bd60ff9c37c386
- MD5 fc9330805185798b74a2dd5203645e23
- SHA1 3d5f25f87f9fc72a392f0dbdb66dc7fc12abc44e
- SHA512 2d83b047ac952c5f384d2c0f11f5ecfb2618b8395ec5c3373e0094bb1a925896e215479f152e42e4b0cca6c5a95fba6db1bf55a0125f28528fca625609983eac
- SSDEEP 3072:MyLxQ6teZeygXKH/oI/rHzdkhl7KUxjJoSQwAEfZqPYwhND3h31ZB01QgosTz6Xu:MyLxQ6tTyg6H/3rTdk37fozwAEfZqwYQ
- TLSH T16B145D15F65940FAE2778538C9920A01FB73BC520770AADF07904AFA9F276D1AE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE