General
- Target 2026-10-01_3b52fdbfeea68cfbee6428ec5e4e38db_cobalt-strike_icedid_satacom_stealc
- Size 4.3MB
- Sample261002-txfv5ay13p
- SHA256 5c42b74c979ecef0f464adff0f49d9e58c0784a697afab4c814c724e4e02db9b
- MD5 3b52fdbfeea68cfbee6428ec5e4e38db
- SHA1 0be2f18c2c2df08ea021a1cf5ac1ccf57ea23d28
- SHA512 00004a8cc98336fd451d9a43ac2a958db6d865062918b05ae089a5411579f4742316791881e9f822db36610a040367a0f7da5b16ddd1187c0402d273031fb712
- SSDEEP 98304:RJlTZOR1qgJi10gNk1LXQfjG1bj9vPBKPYR3o5faXu41MeR+9pYw/TR:hgLqgJi1nNk1cfjGZj9v06ufiOuw/F
- TLSH T18926330976E54CFAEC67867CCD920A86E672BC564771EACF076056970F236E08E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_3b52fdbfeea68cfbee6428ec5e4e38db_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_3b52fdbfeea68cfbee6428ec5e4e38db_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_3b52fdbfeea68cfbee6428ec5e4e38db_cobalt-strike_icedid_satacom_stealc
- Size 4.3MB
- SHA256 5c42b74c979ecef0f464adff0f49d9e58c0784a697afab4c814c724e4e02db9b
- MD5 3b52fdbfeea68cfbee6428ec5e4e38db
- SHA1 0be2f18c2c2df08ea021a1cf5ac1ccf57ea23d28
- SHA512 00004a8cc98336fd451d9a43ac2a958db6d865062918b05ae089a5411579f4742316791881e9f822db36610a040367a0f7da5b16ddd1187c0402d273031fb712
- SSDEEP 98304:RJlTZOR1qgJi10gNk1LXQfjG1bj9vPBKPYR3o5faXu41MeR+9pYw/TR:hgLqgJi1nNk1cfjGZj9v06ufiOuw/F
- TLSH T18926330976E54CFAEC67867CCD920A86E672BC564771EACF076056970F236E08E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.