373607364f88bec39fe3502d80be7f9e1bd09bf1250c8bf550b5e5d53ceb1edb

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 03:01

Target
2026-06-02_fafff20f825e014c28d72f637b84262c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 436KB
Sample260602-dh1c8act8v
SHA256 373607364f88bec39fe3502d80be7f9e1bd09bf1250c8bf550b5e5d53ceb1edb
MD5 fafff20f825e014c28d72f637b84262c
SHA1 bb8a57d877b69b5506b4b088fd063241046db839
SHA512 fc1cdf8f10400d3140b0a2918e251f404b45905c2da0da6d6ebb574b95daed016c6ce7d8ee283308be233ba01f07500be0bfd72b62dbc1393dfd99545235977c
SSDEEP 6144:Fl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzVFegsM2Ksa4qyOt+Fe65mq/4:LNGG3U3ITEmUbqLELpSHe+Fe65Y
TLSH
T1BF94AF15EBA814F9E277C17CCD634606EA727C5A0760A7CF23944A962F33AD18E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-06-02_fafff20f825e014c28d72f637b84262c_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_fafff20f825e014c28d72f637b84262c_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:2560