2e64fb4d0b14b4bbcbc744bb06062a3aecf063ddd6dcea8241309781a6e2b20d

Analysis

max time kernel
149s
max time network
130s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 02:43

Target
2026-06-02_e208724f8849b1e3f5a07fa3f3d6760e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 439KB
Sample260602-c72f5sb19v
SHA256 2e64fb4d0b14b4bbcbc744bb06062a3aecf063ddd6dcea8241309781a6e2b20d
MD5 e208724f8849b1e3f5a07fa3f3d6760e
SHA1 ddb1abf50605ca5086d7087e401983b103fcdc26
SHA512 53c66a4ec8621e966ce46212fdeef22fd0cf7262e7b91e871ea60a1e7f165a9ebb822a2bcca6079526cab33f4f30f5badd65279be9df6244146435de8c6b0599
SSDEEP 6144:gl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz4FegxM2fLW9eA01EmjvFWkblw:MNGG3U3ITEmUbqLEL2Li0F80lw
TLSH
T199A4AF15FBA814F9E277813CCD634606EA727C5A0770A7CF23A44A962F276D09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-06-02_e208724f8849b1e3f5a07fa3f3d6760e_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_e208724f8849b1e3f5a07fa3f3d6760e_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:1376