General
- Target 2026-09-07_c26b5dac02757d3d8cb228177af7764f_cobalt-strike_icedid_njrat_satacom
- Size 415KB
- Sample260908-hd4bjaej51
- SHA256 7cb33fd63b938317098d93d6b89955dda4510180dd34ea86f7eeb8ee4a07f8c1
- MD5 c26b5dac02757d3d8cb228177af7764f
- SHA1 85e691be84991ef21b99bd5f3dc8e7cf767aab04
- SHA512 6f2c2cea32e80eebaa33b7806920c773a1140e98771efacb3a5d158296de15da4e3bda83c17369a223740ec1210f1a52696bd0ff1ecab8f742f6097aeead1a9c
- SSDEEP 6144:OoEM2gpj4IXUP66cbfJh4wK4cmbT/IgdSi8XdBLf:OoPaIXkKbflK4cmbv8
- TLSH T132947C16FBB610E9D873C0388663B227FA713C094B745EE75754595A6F237E09E3AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_c26b5dac02757d3d8cb228177af7764f_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_c26b5dac02757d3d8cb228177af7764f_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_c26b5dac02757d3d8cb228177af7764f_cobalt-strike_icedid_njrat_satacom
- Size 415KB
- SHA256 7cb33fd63b938317098d93d6b89955dda4510180dd34ea86f7eeb8ee4a07f8c1
- MD5 c26b5dac02757d3d8cb228177af7764f
- SHA1 85e691be84991ef21b99bd5f3dc8e7cf767aab04
- SHA512 6f2c2cea32e80eebaa33b7806920c773a1140e98771efacb3a5d158296de15da4e3bda83c17369a223740ec1210f1a52696bd0ff1ecab8f742f6097aeead1a9c
- SSDEEP 6144:OoEM2gpj4IXUP66cbfJh4wK4cmbT/IgdSi8XdBLf:OoPaIXkKbflK4cmbv8
- TLSH T132947C16FBB610E9D873C0388663B227FA713C094B745EE75754595A6F237E09E3AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.