General
- Target 2026-11-12_587238e38ccda69d8ca3f18959a609a9_cobalt-strike_icedid_njrat_qilin_satacom_stealc
- Size 494KB
- Sample261113-c117ssft5k
- SHA256 ca81cb4f947929c78807915fbdeca05ba9989e82a932b5c8735277af0591580f
- MD5 587238e38ccda69d8ca3f18959a609a9
- SHA1 688847f2847804af7a99545b9e88a72a673c9dfc
- SHA512 e7ed3d5e01c452480440e23a86b655d2906934c1195598c55e48ee796e31e76811b5e0de1de9c80be52ca3fd28646d71f2984cca0fc3e44efc9ae72da397df49
- SSDEEP 6144:FIlwZQ5HoLoiy1M1onT5hXK4B0EtAKtF1gwHLwYaPgK+jQHaeycrGW4wfyV912Ib:m6GxbrFVyaJIKV918w
- TLSH T1ABB46C25E6D803FAD177D278CAA35906FA7274461330AACB03D096670F13AD59E7FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-11-12_587238e38ccda69d8ca3f18959a609a9_cobalt-strike_icedid_njrat_qilin_satacom_stealc.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_587238e38ccda69d8ca3f18959a609a9_cobalt-strike_icedid_njrat_qilin_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_587238e38ccda69d8ca3f18959a609a9_cobalt-strike_icedid_njrat_qilin_satacom_stealc
- Size 494KB
- SHA256 ca81cb4f947929c78807915fbdeca05ba9989e82a932b5c8735277af0591580f
- MD5 587238e38ccda69d8ca3f18959a609a9
- SHA1 688847f2847804af7a99545b9e88a72a673c9dfc
- SHA512 e7ed3d5e01c452480440e23a86b655d2906934c1195598c55e48ee796e31e76811b5e0de1de9c80be52ca3fd28646d71f2984cca0fc3e44efc9ae72da397df49
- SSDEEP 6144:FIlwZQ5HoLoiy1M1onT5hXK4B0EtAKtF1gwHLwYaPgK+jQHaeycrGW4wfyV912Ib:m6GxbrFVyaJIKV918w
- TLSH T1ABB46C25E6D803FAD177D278CAA35906FA7274461330AACB03D096670F13AD59E7FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.