General
- Target 2026-06-02_e208724f8849b1e3f5a07fa3f3d6760e_cobalt-strike_icedid_njrat_satacom_stealc
- Size 439KB
- Sample260602-c72f5sb19v
- SHA256 2e64fb4d0b14b4bbcbc744bb06062a3aecf063ddd6dcea8241309781a6e2b20d
- MD5 e208724f8849b1e3f5a07fa3f3d6760e
- SHA1 ddb1abf50605ca5086d7087e401983b103fcdc26
- SHA512 53c66a4ec8621e966ce46212fdeef22fd0cf7262e7b91e871ea60a1e7f165a9ebb822a2bcca6079526cab33f4f30f5badd65279be9df6244146435de8c6b0599
- SSDEEP 6144:gl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz4FegxM2fLW9eA01EmjvFWkblw:MNGG3U3ITEmUbqLEL2Li0F80lw
- TLSH T199A4AF15FBA814F9E277813CCD634606EA727C5A0770A7CF23A44A962F276D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_e208724f8849b1e3f5a07fa3f3d6760e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_e208724f8849b1e3f5a07fa3f3d6760e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_e208724f8849b1e3f5a07fa3f3d6760e_cobalt-strike_icedid_njrat_satacom_stealc
- Size 439KB
- SHA256 2e64fb4d0b14b4bbcbc744bb06062a3aecf063ddd6dcea8241309781a6e2b20d
- MD5 e208724f8849b1e3f5a07fa3f3d6760e
- SHA1 ddb1abf50605ca5086d7087e401983b103fcdc26
- SHA512 53c66a4ec8621e966ce46212fdeef22fd0cf7262e7b91e871ea60a1e7f165a9ebb822a2bcca6079526cab33f4f30f5badd65279be9df6244146435de8c6b0599
- SSDEEP 6144:gl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz4FegxM2fLW9eA01EmjvFWkblw:MNGG3U3ITEmUbqLEL2Li0F80lw
- TLSH T199A4AF15FBA814F9E277813CCD634606EA727C5A0770A7CF23A44A962F276D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.