Analysis
- max time kernel
150s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 23:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 1.1MB
- Sample260916-3mk7jafe65
- SHA256 6561f33b4628a93893b8dc61b779d6415fd492dfd113c671b33f08410303d292
- MD5 186e585f72e86bce31aabab8f332b8f5
- SHA1 f079c9229d9d42e31bffd0c50c00c32725031c63
- SHA512 7dc8992830bcc7ce93309a0f7be81b441907e5a609190e132d3bc2fd3cde28362e3c6d3d777de9adb1a86d37a3ab9313b3a2eb7d842e08c833088a18fc4f30a5
- SSDEEP 24576:3w3gZ2WTZykTk+lFI6lRqbpsjF/2ufm/D7l9i/nqKtTMLoFe:7vg+lFI2Ri42ufm/D7y/nHko
- TLSH T1A035AE45F2F902E8E07B9134E9A5621BE93678551B308ADF17D0069D1F73BD04AFBB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2116 2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe 2116 2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2116 2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2116 2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-16_186e585f72e86bce31aabab8f332b8f5_cobalt-strike_icedid_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2116