General
- Target 2026-09-10_9632f7aed0de87bec4e4623e5974a07d_cobalt-strike_icedid_njrat_satacom
- Size 166KB
- Sample260910-qm7pbahb38
- SHA256 bf097d8e623ba676382c7ed7a252a19cb3b79490fd5306b9f1a689db5d8bebb3
- MD5 9632f7aed0de87bec4e4623e5974a07d
- SHA1 cd0079767837054b41d5667ee8322986e5744f49
- SHA512 bf279bb0051592e291de3a7eb309b79e129e94ec61e8e8bea0ab94bca8162c6be4cc3a3e7128542afe0f4ca80cf387ae5b29993078c798494a49d4d967c2664c
- SSDEEP 3072:SsfQNvRCnVMuJklh55npH4jmYvNxDoFtpdzS:SP4nVMIcNeCx
- TLSH T14AF37E56B6E510F9F573813989A21606EB73782613209BDF03A44376AF237D19E3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_9632f7aed0de87bec4e4623e5974a07d_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_9632f7aed0de87bec4e4623e5974a07d_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_9632f7aed0de87bec4e4623e5974a07d_cobalt-strike_icedid_njrat_satacom
- Size 166KB
- SHA256 bf097d8e623ba676382c7ed7a252a19cb3b79490fd5306b9f1a689db5d8bebb3
- MD5 9632f7aed0de87bec4e4623e5974a07d
- SHA1 cd0079767837054b41d5667ee8322986e5744f49
- SHA512 bf279bb0051592e291de3a7eb309b79e129e94ec61e8e8bea0ab94bca8162c6be4cc3a3e7128542afe0f4ca80cf387ae5b29993078c798494a49d4d967c2664c
- SSDEEP 3072:SsfQNvRCnVMuJklh55npH4jmYvNxDoFtpdzS:SP4nVMIcNeCx
- TLSH T14AF37E56B6E510F9F573813989A21606EB73782613209BDF03A44376AF237D19E3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.