General
- Target 2026-11-12_484daeb4c5da0d2ff22f44b584318c83_cobalt-strike_icedid_njrat_satacom
- Size 1.5MB
- Sample261113-ejkjtsfy8m
- SHA256 f6d7bde4003a62d240ed7856b10bfeab9fa94fbb56026cc4a844c259a87bf577
- MD5 484daeb4c5da0d2ff22f44b584318c83
- SHA1 ea557fc69ae619109f2fc1ac251aebbbdfe9a0c4
- SHA512 9febb87a7b6150741fd1cd8fdf6703600fefcf9a77b24be0e932a425ad6355d2509c75f820a2d1358e33e1605912a7f34f610b38d3bf2d21106a2dd985b584a9
- SSDEEP 24576:1Fl6smFzfMtYFVOLuDxFK+x3UyPHJ0swd/Z2mm61y1nFffex2JHLgJIe0QmM:1FlRmppVOLutbxkQHJY/Z5m64uKrgq
- TLSH T10175011AA7A410FCE1A7D1B4CD574502EB72FC4A4B31E5DF03E45A960F236E09A3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-12_484daeb4c5da0d2ff22f44b584318c83_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_484daeb4c5da0d2ff22f44b584318c83_cobalt-strike_icedid_njrat_satacom
- Size 1.5MB
- SHA256 f6d7bde4003a62d240ed7856b10bfeab9fa94fbb56026cc4a844c259a87bf577
- MD5 484daeb4c5da0d2ff22f44b584318c83
- SHA1 ea557fc69ae619109f2fc1ac251aebbbdfe9a0c4
- SHA512 9febb87a7b6150741fd1cd8fdf6703600fefcf9a77b24be0e932a425ad6355d2509c75f820a2d1358e33e1605912a7f34f610b38d3bf2d21106a2dd985b584a9
- SSDEEP 24576:1Fl6smFzfMtYFVOLuDxFK+x3UyPHJ0swd/Z2mm61y1nFffex2JHLgJIe0QmM:1FlRmppVOLutbxkQHJY/Z5m64uKrgq
- TLSH T10175011AA7A410FCE1A7D1B4CD574502EB72FC4A4B31E5DF03E45A960F236E09A3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.