General

  • Target
    2026-11-03_c35a6c31182496d4c7d1d0d14318f0bf_cobalt-strike_icedid_njrat_satacom_stealc
  • Size 327KB
  • Sample261104-klen9abs7p
  • SHA256 089e2de85178b06a256cef66b4aa7d110acadbd8f8a49a9d118a5879e726eb6a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-03_c35a6c31182496d4c7d1d0d14318f0bf_cobalt-strike_icedid_njrat_satacom_stealc
    • Size 327KB
    • SHA256 089e2de85178b06a256cef66b4aa7d110acadbd8f8a49a9d118a5879e726eb6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Azov

      A wiper seeking only damage, first seen in 2022.

    • Renames multiple (177) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks