General
- Target 2026-09-24_dea96b0c6c9c11a763580e336e7d61f8_cobalt-strike_icedid_njrat_satacom
- Size 367KB
- Sample260924-yvmccaha98
- SHA256 073918cdb86aa2532ac27c05779122c917cd0851eece68d1e8e407b6237a6b8a
- MD5 dea96b0c6c9c11a763580e336e7d61f8
- SHA1 85ed93f028fe0de158d3f9f34976c012fe287019
- SHA512 58d9bcb912435db4c3f2d126ca024db56e94d02c0bb1f13c7123cdbdf4dda22ca0920d396d56a637ded7b4376cb3dcb496aa807e43178865d431013e084fb310
- SSDEEP 6144:V9kdt0RaceJ4/Gv8W8NvzrDUrNQkVQyk2SqeT6j5zIE1:zAvWPnJzrNeQykRrT61z
- TLSH T1C4846E16EA6804FDE1B7D578C9764902DB72F84A07709ECF03940A671F276E49E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_dea96b0c6c9c11a763580e336e7d61f8_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_dea96b0c6c9c11a763580e336e7d61f8_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_dea96b0c6c9c11a763580e336e7d61f8_cobalt-strike_icedid_njrat_satacom
- Size 367KB
- SHA256 073918cdb86aa2532ac27c05779122c917cd0851eece68d1e8e407b6237a6b8a
- MD5 dea96b0c6c9c11a763580e336e7d61f8
- SHA1 85ed93f028fe0de158d3f9f34976c012fe287019
- SHA512 58d9bcb912435db4c3f2d126ca024db56e94d02c0bb1f13c7123cdbdf4dda22ca0920d396d56a637ded7b4376cb3dcb496aa807e43178865d431013e084fb310
- SSDEEP 6144:V9kdt0RaceJ4/Gv8W8NvzrDUrNQkVQyk2SqeT6j5zIE1:zAvWPnJzrNeQykRrT61z
- TLSH T1C4846E16EA6804FDE1B7D578C9764902DB72F84A07709ECF03940A671F276E49E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1