General
- Target 2026-10-26_e7633f675119a0c3acf68681c9ddf6dc_cobalt-strike_icedid_satacom
- Size 3.1MB
- Sample261027-efv66ax16k
- SHA256 868e831b43826ca8d23cb0f3b32c5961c9e87f5e2ac8de4efe9727ac35a196ef
- MD5 e7633f675119a0c3acf68681c9ddf6dc
- SHA1 7039eb2cd981efcc9fccfc9bff2c39f1bdd665e6
- SHA512 99e63cdacc1aded1040a81e149f982f1cca22347c6a2d4a7da85cd51a6d539acf731dfa6a7fafe57211cd278293af331829bc6d52fa465ade8776a371105f248
- SSDEEP 24576:JmmBoHjto1GFxlXutIs1WZX5ARS1pgZ6SdCJn1tuXsbvpWLKoAaLXmoHjto1GFxg:omaT/M+w4pg7dCDt4cYLKoHL3T/M+w
- TLSH T1A1E5E1616A051EFCEBF0B674EBCE536553A52EA2013744CF13D03F8A3937952BEAA051
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_e7633f675119a0c3acf68681c9ddf6dc_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_e7633f675119a0c3acf68681c9ddf6dc_cobalt-strike_icedid_satacom
- Size 3.1MB
- SHA256 868e831b43826ca8d23cb0f3b32c5961c9e87f5e2ac8de4efe9727ac35a196ef
- MD5 e7633f675119a0c3acf68681c9ddf6dc
- SHA1 7039eb2cd981efcc9fccfc9bff2c39f1bdd665e6
- SHA512 99e63cdacc1aded1040a81e149f982f1cca22347c6a2d4a7da85cd51a6d539acf731dfa6a7fafe57211cd278293af331829bc6d52fa465ade8776a371105f248
- SSDEEP 24576:JmmBoHjto1GFxlXutIs1WZX5ARS1pgZ6SdCJn1tuXsbvpWLKoAaLXmoHjto1GFxg:omaT/M+w4pg7dCDt4cYLKoHL3T/M+w
- TLSH T1A1E5E1616A051EFCEBF0B674EBCE536553A52EA2013744CF13D03F8A3937952BEAA051
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1