General
- Target 2026-11-01_ea9c28cb9336ca64b5ce03b32ce16043_cobalt-strike_icedid_satacom_stealc
- Size 1.5MB
- Sample261102-e5tpmazygz
- SHA256 ddccc18d55b8354b6b267d715bcd63f1fa75d3d84e4dabf5806454f8142613be
- MD5 ea9c28cb9336ca64b5ce03b32ce16043
- SHA1 1c52a114bde36258c3bacc8857269d6db51a9a09
- SHA512 4e3570eb36d3716128e2ad22ca3f55cad6afff0b757da00b9fd4b62eacf90ddb217947518313ca016d2abd2b45f0a029466edcd2387c5792b87a1cbe8dbba9c4
- SSDEEP 12288:zS8NtgFd+fPgClCd8S0CH0pxtpMAXM2s0WBjspAoqBODZ7HB0IPK:OcmgPvod50p/TXM2s0espsODZjB0IP
- TLSH T18465CE0396DC3CEAC13A8630B77B87C0D72EEC6553A1D58E43D046A6897E5A37E267D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_ea9c28cb9336ca64b5ce03b32ce16043_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_ea9c28cb9336ca64b5ce03b32ce16043_cobalt-strike_icedid_satacom_stealc
- Size 1.5MB
- SHA256 ddccc18d55b8354b6b267d715bcd63f1fa75d3d84e4dabf5806454f8142613be
- MD5 ea9c28cb9336ca64b5ce03b32ce16043
- SHA1 1c52a114bde36258c3bacc8857269d6db51a9a09
- SHA512 4e3570eb36d3716128e2ad22ca3f55cad6afff0b757da00b9fd4b62eacf90ddb217947518313ca016d2abd2b45f0a029466edcd2387c5792b87a1cbe8dbba9c4
- SSDEEP 12288:zS8NtgFd+fPgClCd8S0CH0pxtpMAXM2s0WBjspAoqBODZ7HB0IPK:OcmgPvod50p/TXM2s0espsODZjB0IP
- TLSH T18465CE0396DC3CEAC13A8630B77B87C0D72EEC6553A1D58E43D046A6897E5A37E267D0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1