General
- Target 2026-03-20_817aa35385199785b9d32c331614ea1a_cobalt-strike_icedid_satacom
- Size 2.3MB
- Sample260320-e43k5sav4k
- SHA256 4857144aef660628da285b1f4b16071d620dd59e3fd157c0dfc8f5605f30e55c
- MD5 817aa35385199785b9d32c331614ea1a
- SHA1 3ae60ae25c1d0724184330137dfb177cb60c8275
- SHA512 a89796d80f8018f3eb3b356ea3bd6825f1adb8bca7de858629654166adca17f5d966fd58753ab96b3c9f1f74cf0c94532e6ba6a92d4c91c99fc05b41786818e2
- SSDEEP 49152:d5mgUQMAuQY8lA3BKlqzTSvlkuhJYf3UGRkCSFWbBv1FKGn:nmnABYQUzTSvlJi3FWil/n
- TLSH T1D4B51268EAB191DBE65D8570CCFEB4A91313B1E61C8075EE00588B871C97BC33A56DF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-03-20_817aa35385199785b9d32c331614ea1a_cobalt-strike_icedid_satacom.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
a
C2
-
http://91.202.233.173
Attributes
-
url_path
/9ed69920a0744799b479.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-03-20_817aa35385199785b9d32c331614ea1a_cobalt-strike_icedid_satacom
- Size 2.3MB
- SHA256 4857144aef660628da285b1f4b16071d620dd59e3fd157c0dfc8f5605f30e55c
- MD5 817aa35385199785b9d32c331614ea1a
- SHA1 3ae60ae25c1d0724184330137dfb177cb60c8275
- SHA512 a89796d80f8018f3eb3b356ea3bd6825f1adb8bca7de858629654166adca17f5d966fd58753ab96b3c9f1f74cf0c94532e6ba6a92d4c91c99fc05b41786818e2
- SSDEEP 49152:d5mgUQMAuQY8lA3BKlqzTSvlkuhJYf3UGRkCSFWbBv1FKGn:nmnABYQUzTSvlJi3FWil/n
- TLSH T1D4B51268EAB191DBE65D8570CCFEB4A91313B1E61C8075EE00588B871C97BC33A56DF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Stealc stealer Version 2
Stealc family