General
- Target 2026-10-18_579053590ce42f33613b87a1e0ed629d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample261018-rlt79sys6r
- SHA256 aaaf69e4e0b4a182534ba40660b6bba498157a21b2f879b0c927f0932029c379
- MD5 579053590ce42f33613b87a1e0ed629d
- SHA1 ab83c8176ecd42d30df3c9524557899d28eb83b4
- SHA512 e02f6b6fdb3101f932119c32bc4eae6a30540514773a8c89f1c8b4b9521469c73f321e1e52b36ff286b6171b603452579cca32c8dce475ec04cd218f2f37db58
- SSDEEP 98304:3HmdqkbvqgHsf5fPauI03eLE4gEwEvMzb/rNj:3mIk1MfxPaI3eLE4gELMzb/rV
- TLSH T12E061247969A12F6D876D134C8162A22FCA2349D43B07FEF16E805D71B776E09B3E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-18_579053590ce42f33613b87a1e0ed629d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-18_579053590ce42f33613b87a1e0ed629d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-18_579053590ce42f33613b87a1e0ed629d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 aaaf69e4e0b4a182534ba40660b6bba498157a21b2f879b0c927f0932029c379
- MD5 579053590ce42f33613b87a1e0ed629d
- SHA1 ab83c8176ecd42d30df3c9524557899d28eb83b4
- SHA512 e02f6b6fdb3101f932119c32bc4eae6a30540514773a8c89f1c8b4b9521469c73f321e1e52b36ff286b6171b603452579cca32c8dce475ec04cd218f2f37db58
- SSDEEP 98304:3HmdqkbvqgHsf5fPauI03eLE4gEwEvMzb/rNj:3mIk1MfxPaI3eLE4gELMzb/rV
- TLSH T12E061247969A12F6D876D134C8162A22FCA2349D43B07FEF16E805D71B776E09B3E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.