General
- Target 2026-10-07_2915aca201ab1167ccc0918b08ae1ee0_cobalt-strike_icedid_satacom_stealc
- Size 151KB
- Sample261008-tpblfass6l
- SHA256 ff6379a044085e27758b1718515b16869a1bba31bb5e31b989aeaf07178fe87a
- MD5 2915aca201ab1167ccc0918b08ae1ee0
- SHA1 b6ff13a6feba1f1d973026dc2e79f783a601f61c
- SHA512 7a7d6d19c9548eac4f858c80b6b22adb5a24b43ffb4ff00653a9f69a5c6cc552a933ebca5821305d9fc6004486ffd57e757457029aa9a64816d81cfb53192349
- SSDEEP 3072:kW4ssEIrEwrxwTWxqLflso/Gadg21ony/n:D3yxFsz9d1
- TLSH T19EE33A5B73A530F9E277923885A61A42F77278310751AFEF0360467A1E633D09E3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-07_2915aca201ab1167ccc0918b08ae1ee0_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-07_2915aca201ab1167ccc0918b08ae1ee0_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-07_2915aca201ab1167ccc0918b08ae1ee0_cobalt-strike_icedid_satacom_stealc
- Size 151KB
- SHA256 ff6379a044085e27758b1718515b16869a1bba31bb5e31b989aeaf07178fe87a
- MD5 2915aca201ab1167ccc0918b08ae1ee0
- SHA1 b6ff13a6feba1f1d973026dc2e79f783a601f61c
- SHA512 7a7d6d19c9548eac4f858c80b6b22adb5a24b43ffb4ff00653a9f69a5c6cc552a933ebca5821305d9fc6004486ffd57e757457029aa9a64816d81cfb53192349
- SSDEEP 3072:kW4ssEIrEwrxwTWxqLflso/Gadg21ony/n:D3yxFsz9d1
- TLSH T19EE33A5B73A530F9E277923885A61A42F77278310751AFEF0360467A1E633D09E3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.