General
- Target 2026-10-01_1970db7f6f170bdb731c5247caa63bf8_cobalt-strike_icedid_satacom
- Size 454KB
- Sample261002-xsmdwsys7q
- SHA256 ff62c5b555c8396df55dc500d52e6f1c34e7a1c16a93ceda3458a7b494688349
- MD5 1970db7f6f170bdb731c5247caa63bf8
- SHA1 5374da0cf0f36a1305e190465d9221e6a71759a4
- SHA512 e14f32fec94e273fa0fd77f4d199d1096b07311d2d80fb82b3e5a6c3c542cbff058ca6e127a359acce56e1cea51fe5756d26b01b636509d9a95e0c60d46b96ce
- SSDEEP 6144:V0EHlSF+zZ4Zcu4a41fzk8zgob1AeXldImVuqWyxKtxqBLaE9Q04AfnnLt:HSsD9SoWeHIirCQRC04Ajt
- TLSH T142A4025A60E5B8FCD632833888250A69E7B5F8346712CFEF523855972F276C14D39FA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_1970db7f6f170bdb731c5247caa63bf8_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_1970db7f6f170bdb731c5247caa63bf8_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_1970db7f6f170bdb731c5247caa63bf8_cobalt-strike_icedid_satacom
- Size 454KB
- SHA256 ff62c5b555c8396df55dc500d52e6f1c34e7a1c16a93ceda3458a7b494688349
- MD5 1970db7f6f170bdb731c5247caa63bf8
- SHA1 5374da0cf0f36a1305e190465d9221e6a71759a4
- SHA512 e14f32fec94e273fa0fd77f4d199d1096b07311d2d80fb82b3e5a6c3c542cbff058ca6e127a359acce56e1cea51fe5756d26b01b636509d9a95e0c60d46b96ce
- SSDEEP 6144:V0EHlSF+zZ4Zcu4a41fzk8zgob1AeXldImVuqWyxKtxqBLaE9Q04AfnnLt:HSsD9SoWeHIirCQRC04Ajt
- TLSH T142A4025A60E5B8FCD632833888250A69E7B5F8346712CFEF523855972F276C14D39FA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in r
-
Detects executables containing commands for clearing Windows Event Logs
-
Executes dropped EXE