General
- Target 2026-09-13_49c76593067fa0cac515dccef8af4346_cobalt-strike_icedid_njrat_satacom
- Size 244KB
- Sample260913-s3bypayfnd
- SHA256 3ee9f64b83f53f72ac3782347905879a55ef85302f8dc9be7d639328a1d3bd41
- MD5 49c76593067fa0cac515dccef8af4346
- SHA1 9911681e7363101fc7a8280d8811adc221ccb378
- SHA512 4dbd3337ea198bd6796c691d1054e081309a00093684d57844262f69273e2c6757ef25878007a97936f9b25dc00e38bdc0ecd91a01cdd387018ccea9ebcb87d2
- SSDEEP 3072:h8Wa5XHCxU6BibfmSiN56Vn2wW2iywGbxOn42DBJv8i:hw91Lq6JBWIZsB
- TLSH T1C4346B49B7A50CF9EE77827D8A910A06EB72BC111720DBEF03B046561F236D19D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-13_49c76593067fa0cac515dccef8af4346_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_49c76593067fa0cac515dccef8af4346_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_49c76593067fa0cac515dccef8af4346_cobalt-strike_icedid_njrat_satacom
- Size 244KB
- SHA256 3ee9f64b83f53f72ac3782347905879a55ef85302f8dc9be7d639328a1d3bd41
- MD5 49c76593067fa0cac515dccef8af4346
- SHA1 9911681e7363101fc7a8280d8811adc221ccb378
- SHA512 4dbd3337ea198bd6796c691d1054e081309a00093684d57844262f69273e2c6757ef25878007a97936f9b25dc00e38bdc0ecd91a01cdd387018ccea9ebcb87d2
- SSDEEP 3072:h8Wa5XHCxU6BibfmSiN56Vn2wW2iywGbxOn42DBJv8i:hw91Lq6JBWIZsB
- TLSH T1C4346B49B7A50CF9EE77827D8A910A06EB72BC111720DBEF03B046561F236D19D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.