General
- Target 2026-10-25_b449adbeb3a8190e695c914480dc6643_cobalt-strike_icedid_njrat_satacom_stealc
- Size 837KB
- Sample261026-sqlmcsey2t
- SHA256 c5da9be507f39384096be9235d13e9ee62a6379ced6c3fd3114d6b31e5037a6b
- MD5 b449adbeb3a8190e695c914480dc6643
- SHA1 054b95c15a0475b258a12d425c7258742760aab2
- SHA512 a9bf88fba82528f21d5367676d85f985bd95bef0de4932bb846180abdee362e8ea98d7b1cdfaf1562f498a7d0da82549d57f7fe16667aa2fdd36d49f3b3703d7
- SSDEEP 24576:BlGNmrjvB6rei13/iHL7UF7PzDPldnAo81kZ5:2Nmojps/UZzjSyb
- TLSH T11D05E158AA8600B5D467D83DCBC69716EAB27883677177CB4BF006963F235F00B3AB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-25_b449adbeb3a8190e695c914480dc6643_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_b449adbeb3a8190e695c914480dc6643_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_b449adbeb3a8190e695c914480dc6643_cobalt-strike_icedid_njrat_satacom_stealc
- Size 837KB
- SHA256 c5da9be507f39384096be9235d13e9ee62a6379ced6c3fd3114d6b31e5037a6b
- MD5 b449adbeb3a8190e695c914480dc6643
- SHA1 054b95c15a0475b258a12d425c7258742760aab2
- SHA512 a9bf88fba82528f21d5367676d85f985bd95bef0de4932bb846180abdee362e8ea98d7b1cdfaf1562f498a7d0da82549d57f7fe16667aa2fdd36d49f3b3703d7
- SSDEEP 24576:BlGNmrjvB6rei13/iHL7UF7PzDPldnAo81kZ5:2Nmojps/UZzjSyb
- TLSH T11D05E158AA8600B5D467D83DCBC69716EAB27883677177CB4BF006963F235F00B3AB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1