General
- Target 2026-10-25_74793d7a2d309a9644bee003fb2bf26c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- Sample261026-3wt6sscc46
- SHA256 e65dbd8d90a0c692a2b7fffc181cee6b87d432d92adbb737c44eb3e2c710f79e
- MD5 74793d7a2d309a9644bee003fb2bf26c
- SHA1 f378009e38273f2b9a51cc3bd49b3f4185df5e55
- SHA512 c383c7eb38a8af8c14f467401f283baead34d8715040d956c7209535463e34c0aae312fc73d830d18a372be55d9c620d3a14741c57f4e69eb0149de6c605ea40
- SSDEEP 49152:vDVcFpdS+5rK0Zx+0a5X/oFFTBjT9E5MpsvnR1Pr:vmDTZ05X/qFNeSynL
- TLSH T13A85F12195D4017DD2B3E3B9DD674806EAB6784A0730AEDF03C0E5B71F225D48A7EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_74793d7a2d309a9644bee003fb2bf26c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_74793d7a2d309a9644bee003fb2bf26c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_74793d7a2d309a9644bee003fb2bf26c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- SHA256 e65dbd8d90a0c692a2b7fffc181cee6b87d432d92adbb737c44eb3e2c710f79e
- MD5 74793d7a2d309a9644bee003fb2bf26c
- SHA1 f378009e38273f2b9a51cc3bd49b3f4185df5e55
- SHA512 c383c7eb38a8af8c14f467401f283baead34d8715040d956c7209535463e34c0aae312fc73d830d18a372be55d9c620d3a14741c57f4e69eb0149de6c605ea40
- SSDEEP 49152:vDVcFpdS+5rK0Zx+0a5X/oFFTBjT9E5MpsvnR1Pr:vmDTZ05X/qFNeSynL
- TLSH T13A85F12195D4017DD2B3E3B9DD674806EAB6784A0730AEDF03C0E5B71F225D48A7EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext