General
- Target 2026-10-25_ae23da76e2a27c66265a4fff82988278_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- Sample261026-tmekbaez91
- SHA256 411c2cdefced64361088879ba4a716e0486149a602438f55b1d1cf038e309783
- MD5 ae23da76e2a27c66265a4fff82988278
- SHA1 4791114340521f85ae8299a67ca480347c625b62
- SHA512 aa55b61f7bb0df44e74f85d485aba53cb29408e154388db65f6fb1b70a3ee4b908bc41fa6ce83b43932d63d794feae9a69ad3eafe31604786069f40cf84f0dc8
- SSDEEP 49152:vDVcFpdS+5rK0Zx+0a5X/oFFTBjT9E5MpsvnR1Pm:vmDTZ05X/qFNeSynG
- TLSH T13E85012195D4017DD2B3E3B9DD674906EAB6784A0730AEDF03C0E5B71F225D48A7EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_ae23da76e2a27c66265a4fff82988278_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_ae23da76e2a27c66265a4fff82988278_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_ae23da76e2a27c66265a4fff82988278_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.7MB
- SHA256 411c2cdefced64361088879ba4a716e0486149a602438f55b1d1cf038e309783
- MD5 ae23da76e2a27c66265a4fff82988278
- SHA1 4791114340521f85ae8299a67ca480347c625b62
- SHA512 aa55b61f7bb0df44e74f85d485aba53cb29408e154388db65f6fb1b70a3ee4b908bc41fa6ce83b43932d63d794feae9a69ad3eafe31604786069f40cf84f0dc8
- SSDEEP 49152:vDVcFpdS+5rK0Zx+0a5X/oFFTBjT9E5MpsvnR1Pm:vmDTZ05X/qFNeSynG
- TLSH T13E85012195D4017DD2B3E3B9DD674906EAB6784A0730AEDF03C0E5B71F225D48A7EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext