General
- Target 2026-11-12_c802075a18eb0fb92a54992bb042cd93_cobalt-strike_icedid_satacom
- Size 17.1MB
- Sample261112-vhdb5avy6l
- SHA256 a98160aaa31581e507c2cd1654ada6f4575b64dbab7fd4b152ba799a5440de39
- MD5 c802075a18eb0fb92a54992bb042cd93
- SHA1 16e86c3aaad943d8afdd136ba913cde6c8f85952
- SHA512 2bf8896e107332bf9dea282b4b06a6421e582f009ac7dcf2f8fd8e73533c2845e01fb7335a6588adee8fa47ea14aed58756ba34ad9bb68be513ae53f10e21c24
- SSDEEP 393216:HSWvMyLLuBd/TmFFWsjGcSXVNYqvIXkXcH00yv69QXtnDKc4p:HSMMokd/TiW9FNDf405Zu
- TLSH T1B40733052B3660D3E9ABCF7EC0D28186A7317DB6CB29A7CF0F50C1A91D16A945E37931
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_c802075a18eb0fb92a54992bb042cd93_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_c802075a18eb0fb92a54992bb042cd93_cobalt-strike_icedid_satacom.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_c802075a18eb0fb92a54992bb042cd93_cobalt-strike_icedid_satacom
- Size 17.1MB
- SHA256 a98160aaa31581e507c2cd1654ada6f4575b64dbab7fd4b152ba799a5440de39
- MD5 c802075a18eb0fb92a54992bb042cd93
- SHA1 16e86c3aaad943d8afdd136ba913cde6c8f85952
- SHA512 2bf8896e107332bf9dea282b4b06a6421e582f009ac7dcf2f8fd8e73533c2845e01fb7335a6588adee8fa47ea14aed58756ba34ad9bb68be513ae53f10e21c24
- SSDEEP 393216:HSWvMyLLuBd/TmFFWsjGcSXVNYqvIXkXcH00yv69QXtnDKc4p:HSMMokd/TiW9FNDf405Zu
- TLSH T1B40733052B3660D3E9ABCF7EC0D28186A7317DB6CB29A7CF0F50C1A91D16A945E37931
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DonutLoader
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
Sliver RAT v2