General

  • Target
    2026-10-22_e81bb8aefcc7355f1552d73d2608af39_cobalt-strike_icedid_satacom
  • Size 1.5MB
  • Sample261023-e9m3mszw4n
  • SHA256 315433446690278f0bc1afcf44bacdd6bf3d08e4e4ac7ee1b428cad5de22e0ec
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-22_e81bb8aefcc7355f1552d73d2608af39_cobalt-strike_icedid_satacom
    • Size 1.5MB
    • SHA256 315433446690278f0bc1afcf44bacdd6bf3d08e4e4ac7ee1b428cad5de22e0ec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Windows security bypass

    • Detects executables packed with unregistered version of .NET Reactor

    • Drops file in Drivers directory

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Executes dropped EXE

    • Windows security modification

MITRE ATT&CK Enterprise v16

Tasks