General
- Target 2026-10-22_08856d41eb172240cce14deb09acc9b0_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- Sample261024-2etchacx7s
- SHA256 aa34c649bba36d4f8ae253e1c40e43fe070de9a9ee74ab1e520080a7784b55a3
- MD5 08856d41eb172240cce14deb09acc9b0
- SHA1 3e49ee03a94e2c14e4a3f667cb78994cdafb4134
- SHA512 fb3671b56320d3233a86e39adc08ad1619eb0262c5978f58f6d1e7c38ded146c676deefa38be513a9d2a980e10c3173c9135c1cec122ce5c743d3b036c65d7d1
- SSDEEP 49152:zDVJFNdS+5rK0Zx+0a5X/oFFTBjT9E5MpsvnR1PU:zxDTZ05X/qFNeSyn0
- TLSH T1E685F12195D4017DD273E3B9EE674807EAB6784A0371AADF03C0E5A71F275D44A3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_08856d41eb172240cce14deb09acc9b0_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_08856d41eb172240cce14deb09acc9b0_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_08856d41eb172240cce14deb09acc9b0_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- SHA256 aa34c649bba36d4f8ae253e1c40e43fe070de9a9ee74ab1e520080a7784b55a3
- MD5 08856d41eb172240cce14deb09acc9b0
- SHA1 3e49ee03a94e2c14e4a3f667cb78994cdafb4134
- SHA512 fb3671b56320d3233a86e39adc08ad1619eb0262c5978f58f6d1e7c38ded146c676deefa38be513a9d2a980e10c3173c9135c1cec122ce5c743d3b036c65d7d1
- SSDEEP 49152:zDVJFNdS+5rK0Zx+0a5X/oFFTBjT9E5MpsvnR1PU:zxDTZ05X/qFNeSyn0
- TLSH T1E685F12195D4017DD273E3B9EE674807EAB6784A0371AADF03C0E5A71F275D44A3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext