General
- Target 2026-10-30_90bdc9257e2d88973b9f591dbed9626a_cobalt-strike_icedid_satacom_stealc
- Size 205KB
- Sample261030-15f97afv4s
- SHA256 8046caa3881073dbbbc47df4e6bb69b318155a77015aefe7c9cf0b10d58d8369
- MD5 90bdc9257e2d88973b9f591dbed9626a
- SHA1 52cdd8b34958253b192707c56888562fcbaee098
- SHA512 0e53a4b33c0309c5dccaf1911c2a74271430baae4d48b5f54defbee01c9320ae0cd7d5eca2655477bd0099287499bde3c44f2d7ec58529fe199b9bae5986b49e
- SSDEEP 6144:xPD5hECG7mSRD4hZ1cjJMtZhdU2Pdc9AGvZDfmuEdk/R:fhECGiSRD4hZ1cjJ5aSnvZSuEdk
- TLSH T1F324495672E410E8E177D2B899A60502F77B7C560B39DEDF03A056294F33AC4ED3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_90bdc9257e2d88973b9f591dbed9626a_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_90bdc9257e2d88973b9f591dbed9626a_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-30_90bdc9257e2d88973b9f591dbed9626a_cobalt-strike_icedid_satacom_stealc
- Size 205KB
- SHA256 8046caa3881073dbbbc47df4e6bb69b318155a77015aefe7c9cf0b10d58d8369
- MD5 90bdc9257e2d88973b9f591dbed9626a
- SHA1 52cdd8b34958253b192707c56888562fcbaee098
- SHA512 0e53a4b33c0309c5dccaf1911c2a74271430baae4d48b5f54defbee01c9320ae0cd7d5eca2655477bd0099287499bde3c44f2d7ec58529fe199b9bae5986b49e
- SSDEEP 6144:xPD5hECG7mSRD4hZ1cjJMtZhdU2Pdc9AGvZDfmuEdk/R:fhECGiSRD4hZ1cjJ5aSnvZSuEdk
- TLSH T1F324495672E410E8E177D2B899A60502F77B7C560B39DEDF03A056294F33AC4ED3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
Modifies RDP port number used by Windows
Adds Run key to start application
Checks whether UAC is enabled