General
- Target 2026-10-26_9f21457be8c5db3d7eb52c30b4512c2c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.5MB
- Sample261027-mpn37sdt2k
- SHA256 823be7e33960b75ca7793f901bc3d167059c6f4fb7bc91731b30b0c1af084f99
- MD5 9f21457be8c5db3d7eb52c30b4512c2c
- SHA1 729e790030aade4e4dd92e8310f5a4ce05162a32
- SHA512 45478a86cdabaaf62c6b4f9b2f959dde876142404df05fe49ec3c0f39d1df824a008adadfbbaae500bdb792f27cfa349a2e042a0f80887e9a6d53080ee6ad630
- SSDEEP 24576:ZlOEwAbohPF54TIA7bJHzNsi9MR1EDzjJnvnIpvOZbVdul3B:ZlNwAbohPvIIGJ6i9NDzxn0GZg3
- TLSH T15E759E1AF6E950FCD076D478CA76991BEB31B819071059EB23E048592F2A6D06FBF703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-26_9f21457be8c5db3d7eb52c30b4512c2c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_9f21457be8c5db3d7eb52c30b4512c2c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_9f21457be8c5db3d7eb52c30b4512c2c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.5MB
- SHA256 823be7e33960b75ca7793f901bc3d167059c6f4fb7bc91731b30b0c1af084f99
- MD5 9f21457be8c5db3d7eb52c30b4512c2c
- SHA1 729e790030aade4e4dd92e8310f5a4ce05162a32
- SHA512 45478a86cdabaaf62c6b4f9b2f959dde876142404df05fe49ec3c0f39d1df824a008adadfbbaae500bdb792f27cfa349a2e042a0f80887e9a6d53080ee6ad630
- SSDEEP 24576:ZlOEwAbohPF54TIA7bJHzNsi9MR1EDzjJnvnIpvOZbVdul3B:ZlNwAbohPvIIGJ6i9NDzxn0GZg3
- TLSH T15E759E1AF6E950FCD076D478CA76991BEB31B819071059EB23E048592F2A6D06FBF703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Looks for VirtualBox Guest Additions in registry
Looks for VMWare Tools registry key
Suspicious use of NtSetInformationThreadHideFromDebugger