General
- Target 2026-11-14_f031a0bed5ef37c1463959dede553288_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample261114-dpqscsvs2p
- SHA256 0cd387bf021a4c905175938a29ca44ebdf743e4233518d6d8a93cb1201ccd6d3
- MD5 f031a0bed5ef37c1463959dede553288
- SHA1 703746a800c2ce4d23536bd54ebc1b4725a723d4
- SHA512 8c469d10d5789c14abba8ee2141ceb6bf06a314576a6c20e317edcde344a726984160a0bff015606d5f5ed66919b59c446789ec772080e294d1f05ff9f4ed410
- SSDEEP 49152:ah1ZDR1M0IIrB1sctWlc53knmOhSFpvflQ:aX9Re0jQcn538mFJO
- TLSH T11775121AE6640CFDE567D5BCCE228A02E6723C4A4360EADF135059631F176D49F3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-14_f031a0bed5ef37c1463959dede553288_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-14_f031a0bed5ef37c1463959dede553288_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-14_f031a0bed5ef37c1463959dede553288_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 0cd387bf021a4c905175938a29ca44ebdf743e4233518d6d8a93cb1201ccd6d3
- MD5 f031a0bed5ef37c1463959dede553288
- SHA1 703746a800c2ce4d23536bd54ebc1b4725a723d4
- SHA512 8c469d10d5789c14abba8ee2141ceb6bf06a314576a6c20e317edcde344a726984160a0bff015606d5f5ed66919b59c446789ec772080e294d1f05ff9f4ed410
- SSDEEP 49152:ah1ZDR1M0IIrB1sctWlc53knmOhSFpvflQ:aX9Re0jQcn538mFJO
- TLSH T11775121AE6640CFDE567D5BCCE228A02E6723C4A4360EADF135059631F176D49F3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10mimikatz is an open source tool to dump credentials on Windows
- Custom signature
Detects executables containing SQL queries to confidential data stores. Observed in infostealers