Overview

overview

6

Static

static

3

2026-09-29...om.exe

windows10-2004-x64

6

2026-09-29...om.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    148s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 04:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-29_1848c0dd6c7586dc9cc6102ad354fdd7_cobalt-strike_icedid_njrat_satacom.exe
  • Size 2.0MB
  • Sample260930-fmn7vsvx3m
  • SHA256 4133c1919ceaf22a06ff546078a009da0f32869d7da9f9c0747af6ae1db3013a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-29_1848c0dd6c7586dc9cc6102ad354fdd7_cobalt-strike_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-29_1848c0dd6c7586dc9cc6102ad354fdd7_cobalt-strike_icedid_njrat_satacom.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:5712
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:1620
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:1396
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
            PID:2664
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:5860
          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
            1⤵
              PID:6108

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  chromElevator_trace.log
                  • Path C:\Users\Admin\AppData\Local\Temp\chromElevator_trace.log
                  • Size 2KB
                  • SHA256 be8bdaae96a9e152d91189c19c7dc28610e4dcc62141e3a088ff4e37da44dab4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  chromElevator_trace.log
                  • Path C:\Users\Admin\AppData\Local\Temp\chromElevator_trace.log
                  • Size 538B
                  • SHA256 cb2320f1876a7cde6680e2bb935ade7497a74a5ec155b711b90106bc8ab54334
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  chromElevator_trace.log
                  • Path C:\Users\Admin\AppData\Local\Temp\chromElevator_trace.log
                  • Size 1016B
                  • SHA256 53cab33e10904208d7f86008bea7ea70198657ff4d2e43cbe22bcae2a334aebc
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  chromElevator_trace.log
                  • Path C:\Users\Admin\AppData\Local\Temp\chromElevator_trace.log
                  • Size 1KB
                  • SHA256 f23a226a4085d20d738f5d10e4637911ca8ada9b472016c35accabbccbf1bc4b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  chromElevator_trace.log
                  • Path C:\Users\Admin\AppData\Local\Temp\chromElevator_trace.log
                  • Size 1KB
                  • SHA256 1f3e05ed429306eb542e3652d0659bbe3945a6a130bcf21b4c87d9c4b08650a7
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  _browser_data.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Chrome\_browser_data.txt
                  • Size 95B
                  • SHA256 2cb0aa014ba04f99a2cd0447d335d8c620b702a18bb4b11bd3b6377cf1c8ab56
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  overview.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Chrome\overview.txt
                  • Size 1018B
                  • SHA256 04b6cfd5337e7541167e2d887f6a1e408457399899e915a200a8ea5cb612548d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  r_history.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Edge\Default\r_history.txt
                  • Size 53B
                  • SHA256 4bccad484e3b67f943a04e4f2f982d563abd638e0f64a224cc95fc211f030c79
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  _browser_data.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Edge\_browser_data.txt
                  • Size 187B
                  • SHA256 4e96a864206347d4131fdd515535e82cb1d7e9bcd40963a8e07662370ec8a937
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  overview.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Edge\overview.txt
                  • Size 991B
                  • SHA256 1e0bc589b418714fb4ae0667343e366b8a73cf97feb866217f1a7c37f4353b51
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  _browser_data.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Firefox\_browser_data.txt
                  • Size 454B
                  • SHA256 33d59ea23e679a560c6a7c75b28378d670f5d8fb420ca31c1260fc9bda28c51d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  bookmarks.json
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Firefox\ej9v93ms.default-release\json\bookmarks.json
                  • Size 905B
                  • SHA256 aa0be76d476056a3c6d7ec6fdd18af0d3483713a2529d54c29ad23ea49832a3d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  r_bookmarks.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Firefox\ej9v93ms.default-release\r_bookmarks.txt
                  • Size 331B
                  • SHA256 a5b09980e3e3c07408a5f74131b9f006af796f6e6d06319f80670ef08b30996f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  r_history.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Firefox\ej9v93ms.default-release\r_history.txt
                  • Size 270B
                  • SHA256 bbcebfbc7954e41969038c81091904e34e77366370274c9b61f8f9a9617f4ca1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  overview.txt
                  • Path C:\Users\Admin\AppData\Local\Temp\chromelevator_20260930_055939\Browser Data\Firefox\overview.txt
                  • Size 1015B
                  • SHA256 e0e21b412012e571d222beaed3e73f057888109c4d18c02b5fd479e1075c41cf
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download