Analysis
- max time kernel
149s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/10/2026, 03:04
General
- Target 2026-10-28_6601ad9cd30604168d190f527d2ba521_cobalt-strike_icedid_njrat_remcos_satacom_stealc.exe
- Size 6.7MB
- Sample261030-dkqlssvxev
- SHA256 86236981cd7bce9e8c0becabf8b283116e6dd3b01a53d54c2f04f1aba809566e
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-28_6601ad9cd30604168d190f527d2ba521_cobalt-strike_icedid_njrat_remcos_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-28_6601ad9cd30604168d190f527d2ba521_cobalt-strike_icedid_njrat_remcos_satacom_stealc.exe"1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2212-2-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-1-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-3-0x0000023E69820000-0x0000023E69830000-memory.dmp
memory/2212-4-0x00007FFA4ED32000-0x00007FFA4ED33000-memory.dmp
memory/2212-5-0x00007FFA4ED8B000-0x00007FFA4ED8C000-memory.dmp
memory/2212-6-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-11-0x00007FFA4ED8B000-0x00007FFA4ED8C000-memory.dmp
memory/2212-10-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-9-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-8-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-7-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-12-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-15-0x0000023E69810000-0x0000023E69820000-memory.dmp
memory/2212-16-0x00007FFA4ED8B000-0x00007FFA4ED8C000-memory.dmp
memory/2212-17-0x0000023E69820000-0x0000023E69823000-memory.dmp