f4246e6743fc841b74a05a82df73177760b5892cbc04391ee44005676adec666

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 23:00

Target
2026-10-27_ecc927d3f3812b60fb3acafe00df0acf_cobalt-strike_icedid_satacom.exe
Size 287KB
Sample261027-2yznmaef73
SHA256 f4246e6743fc841b74a05a82df73177760b5892cbc04391ee44005676adec666
MD5 ecc927d3f3812b60fb3acafe00df0acf
SHA1 58022ca27612a79f2f3845498fdfc1f3e1074080
SHA512 80b6b96dc76fc7de34d32fc954b17368e15ba0f1d7dcb84e2ed4bf6942bce96456cd137e5dfe6117154f63ef7f47d80586ffc07d8d8d8cdd40c117a76be082a0
SSDEEP 6144:LHLMPBNbW/fFKdWOjQlxwjscxKLXEVEd0Y3segx7OIHaZG0k9:LH4PBNUdBLncx8XEVtegdOIlB
TLSH
T10B54DF44B7A585F9ED62863CC89142B5A6627C01D720DEEF03A07E1A3F336D18D3AB75
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2336	2026-10-27_ecc927d3f3812b60fb3acafe00df0acf_cobalt-strike_icedid_satacom.exe
2336	2026-10-27_ecc927d3f3812b60fb3acafe00df0acf_cobalt-strike_icedid_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-27_ecc927d3f3812b60fb3acafe00df0acf_cobalt-strike_icedid_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-27_ecc927d3f3812b60fb3acafe00df0acf_cobalt-strike_icedid_satacom.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2336