General
- Target 2026-06-02_5de5c684411ba935b662c86f050042ac_cobalt-strike_icedid_njrat_satacom_stealc
- Size 468KB
- Sample260602-3xpbyagw3m
- SHA256 85b972ed7b07d610813ca82499e82aa27c9267ea0ba59fccf54ac81121ad29c7
- MD5 5de5c684411ba935b662c86f050042ac
- SHA1 c081b9584db9d1db3582f902b051f7d6f6e2c785
- SHA512 9bb06cd5017376326115e4d7822da883a8d28927f8925ee562dea2da30be941b1daabf133a6880cc3c04f39af393070e8a6081e56b22e98f41d3efe851e8f9c0
- SSDEEP 12288:GNGG3U3ITEmUbqLELUdgbqaJ1dRtb8GLH6A2:wAIAmUbqo4dgbF3RZ9aD
- TLSH T1C1A4B015EBA814F9E2B3C17CCD634602EA727C5A0760D7DF13A48A962F276D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_5de5c684411ba935b662c86f050042ac_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_5de5c684411ba935b662c86f050042ac_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_5de5c684411ba935b662c86f050042ac_cobalt-strike_icedid_njrat_satacom_stealc
- Size 468KB
- SHA256 85b972ed7b07d610813ca82499e82aa27c9267ea0ba59fccf54ac81121ad29c7
- MD5 5de5c684411ba935b662c86f050042ac
- SHA1 c081b9584db9d1db3582f902b051f7d6f6e2c785
- SHA512 9bb06cd5017376326115e4d7822da883a8d28927f8925ee562dea2da30be941b1daabf133a6880cc3c04f39af393070e8a6081e56b22e98f41d3efe851e8f9c0
- SSDEEP 12288:GNGG3U3ITEmUbqLELUdgbqaJ1dRtb8GLH6A2:wAIAmUbqo4dgbF3RZ9aD
- TLSH T1C1A4B015EBA814F9E2B3C17CCD634602EA727C5A0760D7DF13A48A962F276D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.