99de5fe4be20c9e621b4f0f775c138aaa58e3558d4483cc3901841fa775430c9 | Triage™

Login
Reports

Overview

overview

Static

static

2026-10-02...lc.exe

windows10-2004-x64

9

2026-10-02...lc.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-02_e9f866508a7b6ca1cb02109b2ccdcf9b_cobalt-strike_icedid_njrat_satacom_stealc
Size 496KB
Sample261002-3dzzbsverg
SHA256 99de5fe4be20c9e621b4f0f775c138aaa58e3558d4483cc3901841fa775430c9
MD5 e9f866508a7b6ca1cb02109b2ccdcf9b
SHA1 fd9037e2b982b6f49d2d3e93fc43ea2f637e0b2d
SHA512 48a43f121d5a0b5eb09877653366b3c046012aac3bf370c60ff95d126cd4792bcb4e4494be1d6f111dcf9897d299ca14a0d7a2ff300a4abdf5246ab4d9f92e1e
SSDEEP 6144:63/K6QbJ3vJ+oHHMnq7RMte+s+OWVgZOSbhVPgs2D11B1/WTZOrHKM6z0tIC8BxV:63ZQbJ8nqsqVKsKB1ONYqzNTO7egU0O/
TLSH
T190B46C6596A803FDE177D2B4CA674D02E77678860330AADF039099770F276E58A3FB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

2026-10-02_e9f866508a7b6ca1cb02109b2ccdcf9b_cobalt-strike_icedid_njrat_satacom_stealc.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion

Behavioral task

behavioral2

Sample

2026-10-02_e9f866508a7b6ca1cb02109b2ccdcf9b_cobalt-strike_icedid_njrat_satacom_stealc.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  2026-10-02_e9f866508a7b6ca1cb02109b2ccdcf9b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 496KB
- SHA256 99de5fe4be20c9e621b4f0f775c138aaa58e3558d4483cc3901841fa775430c9
- MD5 e9f866508a7b6ca1cb02109b2ccdcf9b
- SHA1 fd9037e2b982b6f49d2d3e93fc43ea2f637e0b2d
- SHA512 48a43f121d5a0b5eb09877653366b3c046012aac3bf370c60ff95d126cd4792bcb4e4494be1d6f111dcf9897d299ca14a0d7a2ff300a4abdf5246ab4d9f92e1e
- SSDEEP 6144:63/K6QbJ3vJ+oHHMnq7RMte+s+OWVgZOSbhVPgs2D11B1/WTZOrHKM6z0tIC8BxV:63ZQbJ8nqsqVKsKB1ONYqzNTO7egU0O/
- TLSH
  T190B46C6596A803FDE177D2B4CA674D02E77678860330AADF039099770F276E58A3FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasion

behavioral2

defense_evasion

© 2018-2026

Terms | Privacy