General
- Target 2026-06-02_a2877dca3da6f4613826d6c867bea2aa_cobalt-strike_icedid_njrat_satacom_stealc
- Size 504KB
- Sample260602-1mdrcafw6k
- SHA256 9c5e1ce292e98a5ca63fd0818d22f6358fe8a29576074a91e567f0c4e2ef0991
- MD5 a2877dca3da6f4613826d6c867bea2aa
- SHA1 913bc44267fc68c4bc9fcffa9a6ef02e1d950ae5
- SHA512 baa05205a9a0cf4dd78f94707c88d1c1114365e0d5f2f3873a14962eb9a70204eb85411f1db6f32399161732afe6ce8dfc47f73c7f08bcaac605c1ff504624b1
- SSDEEP 6144:3l3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzJF2g+M2Y3/8UAzSbM6dtPOlrbuD8:VNGG3U3ITEmUbqLELR3/8UAm7tmlrE8
- TLSH T18BB4C015FBA814F9E173817CCD638606EA727C5A07709BCF23A489962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_a2877dca3da6f4613826d6c867bea2aa_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_a2877dca3da6f4613826d6c867bea2aa_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_a2877dca3da6f4613826d6c867bea2aa_cobalt-strike_icedid_njrat_satacom_stealc
- Size 504KB
- SHA256 9c5e1ce292e98a5ca63fd0818d22f6358fe8a29576074a91e567f0c4e2ef0991
- MD5 a2877dca3da6f4613826d6c867bea2aa
- SHA1 913bc44267fc68c4bc9fcffa9a6ef02e1d950ae5
- SHA512 baa05205a9a0cf4dd78f94707c88d1c1114365e0d5f2f3873a14962eb9a70204eb85411f1db6f32399161732afe6ce8dfc47f73c7f08bcaac605c1ff504624b1
- SSDEEP 6144:3l3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzJF2g+M2Y3/8UAzSbM6dtPOlrbuD8:VNGG3U3ITEmUbqLELR3/8UAm7tmlrE8
- TLSH T18BB4C015FBA814F9E173817CCD638606EA727C5A07709BCF23A489962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.