General
- Target 2026-09-04_07e52cf427d557444549e3ff290f0329_cobalt-strike_icedid_satacom
- Size 146KB
- Sample260905-xyf43a1ckd
- SHA256 ae7ff7f077d717774e7ba961ef72e27cdb9842f505004ebe8aa7c67b1c5a5ab4
- MD5 07e52cf427d557444549e3ff290f0329
- SHA1 e4b8318cffe4612133b5a2fcd470c1789e398790
- SHA512 1432f34be1da207cdeb3ac81258b42793da85234217d604231967a4a27cbce763f1814ef0de2c73a6bb65ba16e4c197642ea668f64ebcc987506aefdd469ed54
- SSDEEP 3072:NO6mVp84sAqjxAbmQ6bwlpSzfqC5XHK+95O8AtzyQZFf:C7F4xAbpIspC5XqyQZF
- TLSH T188E36C67B3E431F5E2724239C5920646EB77B83517619BEF0364426A1F237E09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_07e52cf427d557444549e3ff290f0329_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_07e52cf427d557444549e3ff290f0329_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_07e52cf427d557444549e3ff290f0329_cobalt-strike_icedid_satacom
- Size 146KB
- SHA256 ae7ff7f077d717774e7ba961ef72e27cdb9842f505004ebe8aa7c67b1c5a5ab4
- MD5 07e52cf427d557444549e3ff290f0329
- SHA1 e4b8318cffe4612133b5a2fcd470c1789e398790
- SHA512 1432f34be1da207cdeb3ac81258b42793da85234217d604231967a4a27cbce763f1814ef0de2c73a6bb65ba16e4c197642ea668f64ebcc987506aefdd469ed54
- SSDEEP 3072:NO6mVp84sAqjxAbmQ6bwlpSzfqC5XHK+95O8AtzyQZFf:C7F4xAbpIspC5XqyQZF
- TLSH T188E36C67B3E431F5E2724239C5920646EB77B83517619BEF0364426A1F237E09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VMWare Tools registry key