General
- Target 2026-10-22_28f393dac9c78d8a72e2758685cac50e_cobalt-strike_icedid_njrat_satacom_stealc
- Size 415KB
- Sample261024-w3q96afe26
- SHA256 bbccc0ab770d1b93fd2bc8539bf1dbc8017a19a27cec6d62faa5c05ea6bdb8eb
- MD5 28f393dac9c78d8a72e2758685cac50e
- SHA1 7a71f305e1d4d096e56a20e2d96d85246759c383
- SHA512 22699efec3e4cd62b16713267312a57bbcf819f3cd000870f851c985f52616b1c62e1b27485389ba389823fbb519ec7e2e7d253ed23b7826d0f67d7da1293e15
- SSDEEP 6144:GpyqDP4FRjAyhBQO/kqhXTO/J5OO4Xp4oYRIX1F91mh4++gKvwwd6Rm4:WyqDCBxMqha/kXCIX11m6xvXdGz
- TLSH T1F5947D16E76804FDE277C5788D534906EB72BC4A0360EACF03989A671E276D49E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-22_28f393dac9c78d8a72e2758685cac50e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_28f393dac9c78d8a72e2758685cac50e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_28f393dac9c78d8a72e2758685cac50e_cobalt-strike_icedid_njrat_satacom_stealc
- Size 415KB
- SHA256 bbccc0ab770d1b93fd2bc8539bf1dbc8017a19a27cec6d62faa5c05ea6bdb8eb
- MD5 28f393dac9c78d8a72e2758685cac50e
- SHA1 7a71f305e1d4d096e56a20e2d96d85246759c383
- SHA512 22699efec3e4cd62b16713267312a57bbcf819f3cd000870f851c985f52616b1c62e1b27485389ba389823fbb519ec7e2e7d253ed23b7826d0f67d7da1293e15
- SSDEEP 6144:GpyqDP4FRjAyhBQO/kqhXTO/J5OO4Xp4oYRIX1F91mh4++gKvwwd6Rm4:WyqDCBxMqha/kXCIX11m6xvXdGz
- TLSH T1F5947D16E76804FDE277C5788D534906EB72BC4A0360EACF03989A671E276D49E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.