General
- Target 2026-09-08_63a38538471244b46ad63d821cb8b5cb_cobalt-strike_icedid_njrat_satacom_stealc
- Size 17.1MB
- Sample260908-tyw9hatyf1
- SHA256 19a70c09fa72d6f6df646d8c6f7a2eaee875a2aafa978256282d1b7a40731acd
- MD5 63a38538471244b46ad63d821cb8b5cb
- SHA1 d87f009596a4d5229eed98b03a8b29d0a97fc5ec
- SHA512 c5084e5fec591f627979a392c9ff496c779c910bd94387eebada9fdf9fc85f5c78e143e98ba3786da91ceb10b27a8eb7ba99df8c1ef14ff823a5db1e31e17407
- SSDEEP 393216:xC+gP+ogAnaDP+DOqjUxzIEdWFa25hjqFFtTx+4:Vs+oeaDLjSsEw7hjqzv
- TLSH T1E70733977B9084F5D2F2A476080D5728DBABF8769B15035F93B0EB811D136639E333A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_63a38538471244b46ad63d821cb8b5cb_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_63a38538471244b46ad63d821cb8b5cb_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_63a38538471244b46ad63d821cb8b5cb_cobalt-strike_icedid_njrat_satacom_stealc
- Size 17.1MB
- SHA256 19a70c09fa72d6f6df646d8c6f7a2eaee875a2aafa978256282d1b7a40731acd
- MD5 63a38538471244b46ad63d821cb8b5cb
- SHA1 d87f009596a4d5229eed98b03a8b29d0a97fc5ec
- SHA512 c5084e5fec591f627979a392c9ff496c779c910bd94387eebada9fdf9fc85f5c78e143e98ba3786da91ceb10b27a8eb7ba99df8c1ef14ff823a5db1e31e17407
- SSDEEP 393216:xC+gP+ogAnaDP+DOqjUxzIEdWFa25hjqFFtTx+4:Vs+oeaDLjSsEw7hjqzv
- TLSH T1E70733977B9084F5D2F2A476080D5728DBABF8769B15035F93B0EB811D136639E333A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Executes dropped EXE