Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/09/2026, 22:54
General
- Target 2026-09-03_8ccb08d0c0b5d8d9f185c0f8d97f4dea_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 503KB
- Sample260905-2v2nta1vbs
- SHA256 e6ec26b1f058077f73ef037d33ba140ec39bf18310b81f72991500d32b5d7b16
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 6 IoCs
- Suspicious behavior: EnumeratesProcesses 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-03_8ccb08d0c0b5d8d9f185c0f8d97f4dea_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-03_8ccb08d0c0b5d8d9f185c0f8d97f4dea_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3640-1-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-21-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-19-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-20-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-10-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-9-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-3-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-2-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-53-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-50-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-49-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-48-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-56-0x000001E5B8540000-0x000001E5B8542000-memory.dmp
memory/3640-57-0x00007FF6F9550000-0x00007FF6F95D6000-memory.dmp