9c5e1ce292e98a5ca63fd0818d22f6358fe8a29576074a91e567f0c4e2ef0991

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 21:45

Target
2026-06-02_a2877dca3da6f4613826d6c867bea2aa_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 504KB
Sample260602-1mdrcafw6k
SHA256 9c5e1ce292e98a5ca63fd0818d22f6358fe8a29576074a91e567f0c4e2ef0991
MD5 a2877dca3da6f4613826d6c867bea2aa
SHA1 913bc44267fc68c4bc9fcffa9a6ef02e1d950ae5
SHA512 baa05205a9a0cf4dd78f94707c88d1c1114365e0d5f2f3873a14962eb9a70204eb85411f1db6f32399161732afe6ce8dfc47f73c7f08bcaac605c1ff504624b1
SSDEEP 6144:3l3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzJF2g+M2Y3/8UAzSbM6dtPOlrbuD8:VNGG3U3ITEmUbqLELR3/8UAm7tmlrE8
TLSH
T18BB4C015FBA814F9E173817CCD638606EA727C5A07709BCF23A489962F236D19E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-06-02_a2877dca3da6f4613826d6c867bea2aa_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_a2877dca3da6f4613826d6c867bea2aa_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:3112