General
- Target 2026-09-29_2f88005df9aa03336b72316a253725ac_cobalt-strike_icedid_njrat_satacom_stealc
- Size 11.4MB
- Sample260930-d5fbkazses
- SHA256 5ac87626220b06722433703a28f0320f7dbc8c77dbd15e6815613c7a53cb3bea
- MD5 2f88005df9aa03336b72316a253725ac
- SHA1 64b5b5aebc48f12d6b422dca34404ed53194c991
- SHA512 84cb3b7bf9119815b4490062c2fe3c8bc546e21888de0c46ec388402907231ecc7fbf72378393dd37d9c73c1dc2214aad8c707f76143d575c1f6ad7c324fc20c
- SSDEEP 196608:ipP0RXpNxzk+ZBzg/iI5AFYcu5ENim4Wr8+ZEvOPz5MYLAkx9OYfbamW:1DV7zCyFkvGUWPzBRxt
- TLSH T1BEC6126BEAD462F8D462C7309A47039EB1B1356643A6459F33CA18013E62ED64F36F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-29_2f88005df9aa03336b72316a253725ac_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_2f88005df9aa03336b72316a253725ac_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_2f88005df9aa03336b72316a253725ac_cobalt-strike_icedid_njrat_satacom_stealc
- Size 11.4MB
- SHA256 5ac87626220b06722433703a28f0320f7dbc8c77dbd15e6815613c7a53cb3bea
- MD5 2f88005df9aa03336b72316a253725ac
- SHA1 64b5b5aebc48f12d6b422dca34404ed53194c991
- SHA512 84cb3b7bf9119815b4490062c2fe3c8bc546e21888de0c46ec388402907231ecc7fbf72378393dd37d9c73c1dc2214aad8c707f76143d575c1f6ad7c324fc20c
- SSDEEP 196608:ipP0RXpNxzk+ZBzg/iI5AFYcu5ENim4Wr8+ZEvOPz5MYLAkx9OYfbamW:1DV7zCyFkvGUWPzBRxt
- TLSH T1BEC6126BEAD462F8D462C7309A47039EB1B1356643A6459F33CA18013E62ED64F36F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Suspicious use of NtSetInformationThreadHideFromDebugger