General
- Target 2026-09-28_def1dbd1f7d6f2dd0e9f4b812928ad5a_cobalt-strike_icedid_njrat_satacom_stealc
- Size 23.0MB
- Sample260928-3eed1swbme
- SHA256 4b4eb92edae52165abe23bb24fd349437b39d993d66961f06b6e3a6830c97127
- MD5 def1dbd1f7d6f2dd0e9f4b812928ad5a
- SHA1 cde8928f3b250eecf006d717ca256c083d0fb13e
- SHA512 142406e173c762244f665c343d470c896358057cb3161e5c6e94b51aac731f8b5171fddc58af8f5cf8d80bdd0ffa2b140c9b4453f680b3d0d342927449c1222b
- SSDEEP 393216:gpj0LZ3qm6QKvowbHM/1DlG1UTGyyBYhMkWdhmRMO43pLgJTKeueCvKXIjQKR6Yw:20LZ3qm4r3pHeu+sYj1lGEHaES
- TLSH T163371296E5E50CE4D421B234C4759D23D23B780603709EEF277C956ECEBB6E0A9B3612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_def1dbd1f7d6f2dd0e9f4b812928ad5a_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_def1dbd1f7d6f2dd0e9f4b812928ad5a_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_def1dbd1f7d6f2dd0e9f4b812928ad5a_cobalt-strike_icedid_njrat_satacom_stealc
- Size 23.0MB
- SHA256 4b4eb92edae52165abe23bb24fd349437b39d993d66961f06b6e3a6830c97127
- MD5 def1dbd1f7d6f2dd0e9f4b812928ad5a
- SHA1 cde8928f3b250eecf006d717ca256c083d0fb13e
- SHA512 142406e173c762244f665c343d470c896358057cb3161e5c6e94b51aac731f8b5171fddc58af8f5cf8d80bdd0ffa2b140c9b4453f680b3d0d342927449c1222b
- SSDEEP 393216:gpj0LZ3qm6QKvowbHM/1DlG1UTGyyBYhMkWdhmRMO43pLgJTKeueCvKXIjQKR6Yw:20LZ3qm4r3pHeu+sYj1lGEHaES
- TLSH T163371296E5E50CE4D421B234C4759D23D23B780603709EEF277C956ECEBB6E0A9B3612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.