General
- Target 2026-10-26_5f549587a92bdb66fc23d9de1dfc106d_cobalt-strike_icedid_satacom
- Size 139KB
- Sample261027-tpmcyaea36
- SHA256 b9464d1eedf3532a7c4e1c2422f0dadeb738d2534156244ba392769a48cbd564
- MD5 5f549587a92bdb66fc23d9de1dfc106d
- SHA1 18d748a7e7ed86f1257b3f6bb813164f077df762
- SHA512 09f5cc1d39e36e48aa764b015d0a79b888bbf4e0331a10aa0dfc55d4a3d511de75dc1bb97a31409fa43291950591ee1e558c10dc8ecdd8e62969966dfe5989fb
- SSDEEP 3072:XnvrR8tkNgkxBhpsSyig8sBoxvpxYBXUY6+WSvm:XTDNgkxWSy/k4G
- TLSH T1B7D36C46ABE531F9E17B8678C4A20A16D772F83647719FEF07A042561F237D08E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_5f549587a92bdb66fc23d9de1dfc106d_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_5f549587a92bdb66fc23d9de1dfc106d_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_5f549587a92bdb66fc23d9de1dfc106d_cobalt-strike_icedid_satacom
- Size 139KB
- SHA256 b9464d1eedf3532a7c4e1c2422f0dadeb738d2534156244ba392769a48cbd564
- MD5 5f549587a92bdb66fc23d9de1dfc106d
- SHA1 18d748a7e7ed86f1257b3f6bb813164f077df762
- SHA512 09f5cc1d39e36e48aa764b015d0a79b888bbf4e0331a10aa0dfc55d4a3d511de75dc1bb97a31409fa43291950591ee1e558c10dc8ecdd8e62969966dfe5989fb
- SSDEEP 3072:XnvrR8tkNgkxBhpsSyig8sBoxvpxYBXUY6+WSvm:XTDNgkxWSy/k4G
- TLSH T1B7D36C46ABE531F9E17B8678C4A20A16D772F83647719FEF07A042561F237D08E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext