General
- Target 2026-09-30_62871e8ea0450cad9d40e37e370f2a0c_cobalt-strike_icedid_satacom
- Size 8.2MB
- Sample261001-qlcsjsxcla
- SHA256 af3c3bc1808903b8c5efdfd6f7817c400f6c3652e22cea7ef46345877a59342a
- MD5 62871e8ea0450cad9d40e37e370f2a0c
- SHA1 c30cb6d8126bd458873ec13b58ccacbcb622d594
- SHA512 a3fa54cb992d89fed76086d5c3f4c510eb12cb69345b3e120337c0083f8e4bd3a087737344572a3871248116c496755a45c914ec83d79b17a3ac23f4387d2b9c
- SSDEEP 49152:FEYHbpJTUDUmrit5QfY4406YcNYyi3Ut3a46hr0T2aWYWc70LkrKhnx+U/j25t/c:vwg10PcRi3Ut376pEWDLTn
- TLSH T1CF86B72592080395F539E3BE1AD97BB97B147F28B0340419F7DE6993A513DA0E3F43A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_62871e8ea0450cad9d40e37e370f2a0c_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_62871e8ea0450cad9d40e37e370f2a0c_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_62871e8ea0450cad9d40e37e370f2a0c_cobalt-strike_icedid_satacom
- Size 8.2MB
- SHA256 af3c3bc1808903b8c5efdfd6f7817c400f6c3652e22cea7ef46345877a59342a
- MD5 62871e8ea0450cad9d40e37e370f2a0c
- SHA1 c30cb6d8126bd458873ec13b58ccacbcb622d594
- SHA512 a3fa54cb992d89fed76086d5c3f4c510eb12cb69345b3e120337c0083f8e4bd3a087737344572a3871248116c496755a45c914ec83d79b17a3ac23f4387d2b9c
- SSDEEP 49152:FEYHbpJTUDUmrit5QfY4406YcNYyi3Ut3a46hr0T2aWYWc70LkrKhnx+U/j25t/c:vwg10PcRi3Ut376pEWDLTn
- TLSH T1CF86B72592080395F539E3BE1AD97BB97B147F28B0340419F7DE6993A513DA0E3F43A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
-
Executes dropped EXE