General
- Target 2026-09-08_bec3e4ab2e2f280caaa5803ddce2d527_cobalt-strike_icedid_satacom
- Size 364KB
- Sample260910-djlapaxvbt
- SHA256 fc78d37a9122510056fb8bbb1bfebbdda0f2afddacc32c10f03e07d52863c412
- MD5 bec3e4ab2e2f280caaa5803ddce2d527
- SHA1 b30534bc9b69060cb6d890d856f29454d106a0e3
- SHA512 9ea0fd3eea25ac01c498d83482528ab87cc1730f31a0ff2e094b37ed0e5a26db562f89ef225876279c223df832d9a826292a4d3cbf4abfffa5c681de12cd0dfb
- SSDEEP 6144:vQ3sjK3aWLWpeYDMrH7SrNTA7K2SyV/4RgtsgH1f72P13/P9MTqf:v4RLq7rK77ShgSgVfcR/PiWf
- TLSH T122846D15E6A804F9E2B7D178CE634902D776F84A0771ABCF07908A971F23AD49E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-08_bec3e4ab2e2f280caaa5803ddce2d527_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_bec3e4ab2e2f280caaa5803ddce2d527_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_bec3e4ab2e2f280caaa5803ddce2d527_cobalt-strike_icedid_satacom
- Size 364KB
- SHA256 fc78d37a9122510056fb8bbb1bfebbdda0f2afddacc32c10f03e07d52863c412
- MD5 bec3e4ab2e2f280caaa5803ddce2d527
- SHA1 b30534bc9b69060cb6d890d856f29454d106a0e3
- SHA512 9ea0fd3eea25ac01c498d83482528ab87cc1730f31a0ff2e094b37ed0e5a26db562f89ef225876279c223df832d9a826292a4d3cbf4abfffa5c681de12cd0dfb
- SSDEEP 6144:vQ3sjK3aWLWpeYDMrH7SrNTA7K2SyV/4RgtsgH1f72P13/P9MTqf:v4RLq7rK77ShgSgVfcR/PiWf
- TLSH T122846D15E6A804F9E2B7D178CE634902D776F84A0771ABCF07908A971F23AD49E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.