General
- Target 2026-10-20_2c85a110fa2b84c881be0923225c8c4a_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.6MB
- Sample261020-j3d9daxvcs
- SHA256 03938d1ce90c1bdcbe6ca1ac66e0a28243a82ed9bdc3046724acbcf93b9b4a13
- MD5 2c85a110fa2b84c881be0923225c8c4a
- SHA1 8c25309ab65f5801c5cc112eef5740f03f91b9ed
- SHA512 704380b6e3c89a835b0b6561c4cf2b2e046dc27ce39af45b84bf540da575acf5781e29554bca243b4a9bf2ca04d40537b9338dfdb277df21b0e5b0a9acd14644
- SSDEEP 98304:dOd19TunsWq7F75gVrjBZYJdiKgrO7IZhDGAXR9y:YnynsW6F75agdiK0O7IZhDnC
- TLSH T17D061247969516EAC8BA8438C84B6623F8A234CD43B47FDB16E805D72B777E05B7D302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-20_2c85a110fa2b84c881be0923225c8c4a_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-20_2c85a110fa2b84c881be0923225c8c4a_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-20_2c85a110fa2b84c881be0923225c8c4a_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.6MB
- SHA256 03938d1ce90c1bdcbe6ca1ac66e0a28243a82ed9bdc3046724acbcf93b9b4a13
- MD5 2c85a110fa2b84c881be0923225c8c4a
- SHA1 8c25309ab65f5801c5cc112eef5740f03f91b9ed
- SHA512 704380b6e3c89a835b0b6561c4cf2b2e046dc27ce39af45b84bf540da575acf5781e29554bca243b4a9bf2ca04d40537b9338dfdb277df21b0e5b0a9acd14644
- SSDEEP 98304:dOd19TunsWq7F75gVrjBZYJdiKgrO7IZhDGAXR9y:YnynsW6F75agdiK0O7IZhDnC
- TLSH T17D061247969516EAC8BA8438C84B6623F8A234CD43B47FDB16E805D72B777E05B7D302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.