General
- Target 2026-09-03_ff4bda4ba954b20091c8cd916f9ccc0e_cobalt-strike_icedid_njrat_satacom
- Size 65.3MB
- Sample260903-wbtwzaselb
- SHA256 313cf8604f5c0986b202d0f58a3b9fdeda4ebaf0e36b7a37c361f18148922387
- MD5 ff4bda4ba954b20091c8cd916f9ccc0e
- SHA1 9eb85b4a09a5e11429573550e9d3b8ff6f0cda7e
- SHA512 29b313a2aea4087f59cc11e0cf1715309ce7167b5604a2b8bcf9578793efa48d1dcc151b0ac89eb3e04b1826684805fb87f1281fae9d029f8a1bcda5af46bcb2
- SSDEEP 786432:bz/NQKTzBWXOrarbnLEY27pOr+i9UATUU+ZfmuKFt:bz/NvzB+rbnIY28r3rTUUXuKF
- TLSH T157E7DCA89CAD7BF82B0377BDA008509B255D6E5387CB56370FF28BE78EE91D00045976
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_ff4bda4ba954b20091c8cd916f9ccc0e_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_ff4bda4ba954b20091c8cd916f9ccc0e_cobalt-strike_icedid_njrat_satacom
- Size 65.3MB
- SHA256 313cf8604f5c0986b202d0f58a3b9fdeda4ebaf0e36b7a37c361f18148922387
- MD5 ff4bda4ba954b20091c8cd916f9ccc0e
- SHA1 9eb85b4a09a5e11429573550e9d3b8ff6f0cda7e
- SHA512 29b313a2aea4087f59cc11e0cf1715309ce7167b5604a2b8bcf9578793efa48d1dcc151b0ac89eb3e04b1826684805fb87f1281fae9d029f8a1bcda5af46bcb2
- SSDEEP 786432:bz/NQKTzBWXOrarbnLEY27pOr+i9UATUU+ZfmuKFt:bz/NvzB+rbnIY28r3rTUUXuKF
- TLSH T157E7DCA89CAD7BF82B0377BDA008509B255D6E5387CB56370FF28BE78EE91D00045976
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE