General
- Target 2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc
- Size 619KB
- Sample261027-n5by9add66
- SHA256 6cfeb6a2d6c0d4e3371da4fec171093b538e7b7565b52561029595b19f44b862
- MD5 8fc91e8b2dbb3dc7076350f4b5a182b1
- SHA1 319b214d947fc48310f9034a193faf8f9c1d64dd
- SHA512 b91a5771fd941a638a95807971d791862fb79eb5573c867533c106da20c45b3bddab970443953d5f9f11f31db085fed69d18a80d4d9c577f99987f9a9c95dca0
- SSDEEP 6144:K3DQ73r/dI7LI+iix8/mRlR2InxCcMHSOX/revKmY+WCTNZil10lAJtxcGUvVoc9:yDc7Mx8/ilR2IxCYo1T72vmcpXjg
- TLSH T1EBD46C16E7A502F9C47BC3B4CAC29856EA767815533266CB03E229725F376B0533EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc
- Size 619KB
- SHA256 6cfeb6a2d6c0d4e3371da4fec171093b538e7b7565b52561029595b19f44b862
- MD5 8fc91e8b2dbb3dc7076350f4b5a182b1
- SHA1 319b214d947fc48310f9034a193faf8f9c1d64dd
- SHA512 b91a5771fd941a638a95807971d791862fb79eb5573c867533c106da20c45b3bddab970443953d5f9f11f31db085fed69d18a80d4d9c577f99987f9a9c95dca0
- SSDEEP 6144:K3DQ73r/dI7LI+iix8/mRlR2InxCcMHSOX/revKmY+WCTNZil10lAJtxcGUvVoc9:yDc7Mx8/ilR2IxCYo1T72vmcpXjg
- TLSH T1EBD46C16E7A502F9C47BC3B4CAC29856EA767815533266CB03E229725F376B0533EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.