3afc6f81eddb3b1fe375ae7798247cd870e19d29b568cc7b052d3cf531eba38e

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 17:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-22_310e95065b879034f8c86c0abfef473c_cobalt-strike_icedid_satacom.exe
Size 781KB
Sample261024-v2a14sbs8y
SHA256 3afc6f81eddb3b1fe375ae7798247cd870e19d29b568cc7b052d3cf531eba38e
MD5 310e95065b879034f8c86c0abfef473c
SHA1 947a40571ea9a49c869d016f9f76de69c80b1602
SHA512 e920c8f3be2308946488a7b4d2a309a3bd394102239774f164cb205aac9bb9e3fb808f620e3702cfbdca1f364557a992b2ee742cf112cbefe343c2882f99afd5
SSDEEP 6144:oD2/k89ifLcy6HbWbXKSuBW9HIMd0hiZHibWwINq+9kbuM9e6jGK:a2/k5jj6HXbEH/d3itgJK
TLSH
T1DE05DB223512D64AD82202BDC15A6FB0DDF1BC2D6320D8FE24A9BD0FF5F9A48245579F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5056	2026-10-22_310e95065b879034f8c86c0abfef473c_cobalt-strike_icedid_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_310e95065b879034f8c86c0abfef473c_cobalt-strike_icedid_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_310e95065b879034f8c86c0abfef473c_cobalt-strike_icedid_satacom.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:5056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

matepath.ini

Path C:\Users\Admin\AppData\Local\Temp\matepath.ini
Size 26B
SHA256 645dec8f1cc3cf666a844f1586d302ab6a0ad72b95db825b91ac3f47fc004a58
MD5 228a255c9226054d0eb4c836f64cc535
SHA1 f15d9f0d277a7362f83d9ee7da29a55a3d407004
SHA512 4ef48fa9229e89a6ca00af48f4487bb5cfee0f8eb0bf16f670c738b2dbca75cfab4a3434a8777474842dbd0bfbb44daeeb2131a59aae7ad421aa106a62d7d6b5
MD5 SHA1 SHA512

Submit Download