General
- Target 2026-09-09_cc48cea463ca9a5913a6129b5ed738ef_cobalt-strike_icedid_satacom
- Size 33.0MB
- Sample260910-3c2rjaxdjc
- SHA256 73bac8614a07f9641b83c735ce24cb7bc8d9329016a1263fd5a8d2a755d9bcf5
Score
10/10
Malware Config
Targets
-
- Target 2026-09-09_cc48cea463ca9a5913a6129b5ed738ef_cobalt-strike_icedid_satacom
- Size 33.0MB
- SHA256 73bac8614a07f9641b83c735ce24cb7bc8d9329016a1263fd5a8d2a755d9bcf5
Score10/10-
Windows security bypass
-
Modifies Windows Firewall
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Windows security modification
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2Component Object Model Hijacking
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2Component Object Model Hijacking
1Netsh Helper DLL
1