General
- Target 2026-09-06_06cef2c46ee2a4b85e1ca68021d822c6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.5MB
- Sample260907-kdsadaz1fv
- SHA256 003ad4e0edc4ced4fe088ba8308e08dc1485e3792be17fa45d32431cd28fabf2
- MD5 06cef2c46ee2a4b85e1ca68021d822c6
- SHA1 82cdbd600b217ab9624e138fcd5ad5fdc5e4e992
- SHA512 498bc43641e39a76219fd62c46cf2b2f8de236f3205ec0a0688026d3f864785d16cfca6691784997ef089b879286cbc38dac150c829fe22dcab8a4628f3ded84
- SSDEEP 98304:pum+7Fcnf/3A5lVEN5BSP4F0p4NYUfZk+sqbv:pumwFT5lVABTSTCk+
- TLSH T10706AEFE58446237FA5A42BD5199C678F314D833F8C7CA87E2C42A694C73670EAB9131
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-06_06cef2c46ee2a4b85e1ca68021d822c6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-09-06_06cef2c46ee2a4b85e1ca68021d822c6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-09-06_06cef2c46ee2a4b85e1ca68021d822c6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.5MB
- SHA256 003ad4e0edc4ced4fe088ba8308e08dc1485e3792be17fa45d32431cd28fabf2
- MD5 06cef2c46ee2a4b85e1ca68021d822c6
- SHA1 82cdbd600b217ab9624e138fcd5ad5fdc5e4e992
- SHA512 498bc43641e39a76219fd62c46cf2b2f8de236f3205ec0a0688026d3f864785d16cfca6691784997ef089b879286cbc38dac150c829fe22dcab8a4628f3ded84
- SSDEEP 98304:pum+7Fcnf/3A5lVEN5BSP4F0p4NYUfZk+sqbv:pumwFT5lVABTSTCk+
- TLSH T10706AEFE58446237FA5A42BD5199C678F314D833F8C7CA87E2C42A694C73670EAB9131
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Server Software Component
1Terminal Services DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1