General
- Target 2026-06-03_4d738cbe03d04589a26c040d3044a566_cobalt-strike_icedid_njrat_satacom_stealc
- Size 576KB
- Sample260603-n2dnnsd17x
- SHA256 e46994c144d496ba047e8abd5a61ef97d5b92419357fecff60435f664817b7d3
- MD5 4d738cbe03d04589a26c040d3044a566
- SHA1 17cf4b4aa9e6e27c81d52e2ae217cd9b7bfedd62
- SHA512 87e59416bfd3483f08af9f597af15629ba4f765557c4134ff94dc0e62f19ccd744e472c3cfef6af67bb72d8f50146b9fe0bba491a17cf585d95d2ff5601b1465
- SSDEEP 12288:XNGG3U3ITEmUbqLELKdrITpxNkBBbD2OVAV7JnsRs5w:LAIAmUbqouuNjk/baOq3sRs5w
- TLSH T191C4D055FBA814F9E173913CCE634606EA717C990370ABCF23944A962F236D19E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_4d738cbe03d04589a26c040d3044a566_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_4d738cbe03d04589a26c040d3044a566_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_4d738cbe03d04589a26c040d3044a566_cobalt-strike_icedid_njrat_satacom_stealc
- Size 576KB
- SHA256 e46994c144d496ba047e8abd5a61ef97d5b92419357fecff60435f664817b7d3
- MD5 4d738cbe03d04589a26c040d3044a566
- SHA1 17cf4b4aa9e6e27c81d52e2ae217cd9b7bfedd62
- SHA512 87e59416bfd3483f08af9f597af15629ba4f765557c4134ff94dc0e62f19ccd744e472c3cfef6af67bb72d8f50146b9fe0bba491a17cf585d95d2ff5601b1465
- SSDEEP 12288:XNGG3U3ITEmUbqLELKdrITpxNkBBbD2OVAV7JnsRs5w:LAIAmUbqouuNjk/baOq3sRs5w
- TLSH T191C4D055FBA814F9E173913CCE634606EA717C990370ABCF23944A962F236D19E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.