General
- Target 2026-09-29_456638cc9987c3857b36d7514faaf5df_cobalt-strike_icedid_satacom_stealc
- Size 3.4MB
- Sample260930-cl8nbst19n
- SHA256 1edd01399bd0632ba2f1ae0e9b077fdafc1852687eb2475093d99fd2d1515cee
- MD5 456638cc9987c3857b36d7514faaf5df
- SHA1 0a1fe7915e1911135d05f5f64f5999fca6ff8acd
- SHA512 7eff82a8dfd824e49a7be5e3e16620c1bb2de8ac5aba099168bebd2938ee7696029ecbcf4a87696608840c39ff5720e9414d2409ceee1390f46b356dc0adeb04
- SSDEEP 98304:9C6PupOnK8pUluwmwXqtsx97WENydHvRTRlUk:Puw1UcwNqtsmLZuk
- TLSH T19DF533B296F2A9FAC17B58BC84020905CB51FA79D78306E72705CEC21E57BD48DBEC25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_456638cc9987c3857b36d7514faaf5df_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_456638cc9987c3857b36d7514faaf5df_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_456638cc9987c3857b36d7514faaf5df_cobalt-strike_icedid_satacom_stealc
- Size 3.4MB
- SHA256 1edd01399bd0632ba2f1ae0e9b077fdafc1852687eb2475093d99fd2d1515cee
- MD5 456638cc9987c3857b36d7514faaf5df
- SHA1 0a1fe7915e1911135d05f5f64f5999fca6ff8acd
- SHA512 7eff82a8dfd824e49a7be5e3e16620c1bb2de8ac5aba099168bebd2938ee7696029ecbcf4a87696608840c39ff5720e9414d2409ceee1390f46b356dc0adeb04
- SSDEEP 98304:9C6PupOnK8pUluwmwXqtsx97WENydHvRTRlUk:Puw1UcwNqtsmLZuk
- TLSH T19DF533B296F2A9FAC17B58BC84020905CB51FA79D78306E72705CEC21E57BD48DBEC25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.