General
- Target 2026-10-22_30ebc7bd6bbfe866ca1a8c23aeb197af_cobalt-strike_icedid_satacom_stealc
- Size 156KB
- Sample261024-v2thfsv1e1
- SHA256 503225b031ced0ed5573439c14fcdc9116b4e0661f1b557b86f84d046f172803
- MD5 30ebc7bd6bbfe866ca1a8c23aeb197af
- SHA1 770d98a5a49b4337e8b58065398624c3057e154a
- SHA512 9e67637dad721bc02a166fbb33b3bef492c6358e8679c87b3c77e4c10351047bae7401ebf0b61479a59cb050aeb2d359a48352c3b7adffe644f8b03195e00012
- SSDEEP 3072:M1IEid3mNrMo3qRCRsKWU9LxtKU/f2loZ5MVaw:MfiJo3WKWgyyrcR
- TLSH T1E7F34A5773A930F9E267923885E60646F772B83107206BEF0360477A1F276D49E7BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_30ebc7bd6bbfe866ca1a8c23aeb197af_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_30ebc7bd6bbfe866ca1a8c23aeb197af_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_30ebc7bd6bbfe866ca1a8c23aeb197af_cobalt-strike_icedid_satacom_stealc
- Size 156KB
- SHA256 503225b031ced0ed5573439c14fcdc9116b4e0661f1b557b86f84d046f172803
- MD5 30ebc7bd6bbfe866ca1a8c23aeb197af
- SHA1 770d98a5a49b4337e8b58065398624c3057e154a
- SHA512 9e67637dad721bc02a166fbb33b3bef492c6358e8679c87b3c77e4c10351047bae7401ebf0b61479a59cb050aeb2d359a48352c3b7adffe644f8b03195e00012
- SSDEEP 3072:M1IEid3mNrMo3qRCRsKWU9LxtKU/f2loZ5MVaw:MfiJo3WKWgyyrcR
- TLSH T1E7F34A5773A930F9E267923885E60646F772B83107206BEF0360477A1F276D49E7BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.