General
- Target 2026-06-02_fafff20f825e014c28d72f637b84262c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 436KB
- Sample260602-dh1c8act8v
- SHA256 373607364f88bec39fe3502d80be7f9e1bd09bf1250c8bf550b5e5d53ceb1edb
- MD5 fafff20f825e014c28d72f637b84262c
- SHA1 bb8a57d877b69b5506b4b088fd063241046db839
- SHA512 fc1cdf8f10400d3140b0a2918e251f404b45905c2da0da6d6ebb574b95daed016c6ce7d8ee283308be233ba01f07500be0bfd72b62dbc1393dfd99545235977c
- SSDEEP 6144:Fl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzVFegsM2Ksa4qyOt+Fe65mq/4:LNGG3U3ITEmUbqLELpSHe+Fe65Y
- TLSH T1BF94AF15EBA814F9E277C17CCD634606EA727C5A0760A7CF23944A962F33AD18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_fafff20f825e014c28d72f637b84262c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_fafff20f825e014c28d72f637b84262c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_fafff20f825e014c28d72f637b84262c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 436KB
- SHA256 373607364f88bec39fe3502d80be7f9e1bd09bf1250c8bf550b5e5d53ceb1edb
- MD5 fafff20f825e014c28d72f637b84262c
- SHA1 bb8a57d877b69b5506b4b088fd063241046db839
- SHA512 fc1cdf8f10400d3140b0a2918e251f404b45905c2da0da6d6ebb574b95daed016c6ce7d8ee283308be233ba01f07500be0bfd72b62dbc1393dfd99545235977c
- SSDEEP 6144:Fl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzVFegsM2Ksa4qyOt+Fe65mq/4:LNGG3U3ITEmUbqLELpSHe+Fe65Y
- TLSH T1BF94AF15EBA814F9E277C17CCD634606EA727C5A0760A7CF23944A962F33AD18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.