General
- Target 2026-10-22_59f3649ff8552e1d067c7f3eadfcc47b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 947KB
- Sample261024-pf9dwseh76
- SHA256 46602cd1ba0629c5b580dd32525d3e7a8f5b64a296b5b577093d3ae2f904ae8a
- MD5 59f3649ff8552e1d067c7f3eadfcc47b
- SHA1 1de3c756198df6757d1513fa9973c592adc25d51
- SHA512 7cbde9b2934d8a8901dad121caf202c87afccfd70895639441b195ae6a5cd46f9f254781481c782cb89c408afb4e69573c9f4189a96abf554cb2fd3cce6b40a1
- SSDEEP 12288:X6rTc4UJzA/W3F8unx32kUycY6k19FKyDFrb7DuLMOKvnDXiy9OrhBcm+VXJjY0U:X6SJzAxunx32MRThj0Ta+zhTUuvW
- TLSH T1A1251A1AB98DD5B9E587CC78A64F09031B34759F1765A8EF43C8AD723EA72B40B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_59f3649ff8552e1d067c7f3eadfcc47b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_59f3649ff8552e1d067c7f3eadfcc47b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_59f3649ff8552e1d067c7f3eadfcc47b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 947KB
- SHA256 46602cd1ba0629c5b580dd32525d3e7a8f5b64a296b5b577093d3ae2f904ae8a
- MD5 59f3649ff8552e1d067c7f3eadfcc47b
- SHA1 1de3c756198df6757d1513fa9973c592adc25d51
- SHA512 7cbde9b2934d8a8901dad121caf202c87afccfd70895639441b195ae6a5cd46f9f254781481c782cb89c408afb4e69573c9f4189a96abf554cb2fd3cce6b40a1
- SSDEEP 12288:X6rTc4UJzA/W3F8unx32kUycY6k19FKyDFrb7DuLMOKvnDXiy9OrhBcm+VXJjY0U:X6SJzAxunx32MRThj0Ta+zhTUuvW
- TLSH T1A1251A1AB98DD5B9E587CC78A64F09031B34759F1765A8EF43C8AD723EA72B40B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext