General
- Target 2026-10-26_e3b48f49f433e611993ad08930060e8f_cobalt-strike_icedid_satacom_stealc
- Size 530KB
- Sample261027-eytfaacf59
- SHA256 2ba0499e2c9d55bce8e2d1c57385a224dc978414632c0451f0c0323ed5ec54f0
- MD5 e3b48f49f433e611993ad08930060e8f
- SHA1 b5e05e4691e05edd783ab90de008319996f91a09
- SHA512 c1d3d4c59d7b63a4f1f4bab14128a771a2346d4cc05bfe374d404d06ba976df7581ecde881f3ef702739c544fed62597eef5bd26f8e63d1c0fdf92edf4420c97
- SSDEEP 6144:iPY18M+132S4QqMC7iP7SRSbjFe1KES0lK6foX3SbOSxby2grU/u25oQmF72znQY:qiHonwxWt16o0M2eCNsES7P2j2
- TLSH T1E4B46B46B2E598FED673C07AC5452A49AFB1BC16434CCCEB139089751EA38E0AF3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_e3b48f49f433e611993ad08930060e8f_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_e3b48f49f433e611993ad08930060e8f_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_e3b48f49f433e611993ad08930060e8f_cobalt-strike_icedid_satacom_stealc
- Size 530KB
- SHA256 2ba0499e2c9d55bce8e2d1c57385a224dc978414632c0451f0c0323ed5ec54f0
- MD5 e3b48f49f433e611993ad08930060e8f
- SHA1 b5e05e4691e05edd783ab90de008319996f91a09
- SHA512 c1d3d4c59d7b63a4f1f4bab14128a771a2346d4cc05bfe374d404d06ba976df7581ecde881f3ef702739c544fed62597eef5bd26f8e63d1c0fdf92edf4420c97
- SSDEEP 6144:iPY18M+132S4QqMC7iP7SRSbjFe1KES0lK6foX3SbOSxby2grU/u25oQmF72znQY:qiHonwxWt16o0M2eCNsES7P2j2
- TLSH T1E4B46B46B2E598FED673C07AC5452A49AFB1BC16434CCCEB139089751EA38E0AF3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE