e46994c144d496ba047e8abd5a61ef97d5b92419357fecff60435f664817b7d3

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/06/2026, 11:53

Target
2026-06-03_4d738cbe03d04589a26c040d3044a566_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 576KB
Sample260603-n2dnnsd17x
SHA256 e46994c144d496ba047e8abd5a61ef97d5b92419357fecff60435f664817b7d3
MD5 4d738cbe03d04589a26c040d3044a566
SHA1 17cf4b4aa9e6e27c81d52e2ae217cd9b7bfedd62
SHA512 87e59416bfd3483f08af9f597af15629ba4f765557c4134ff94dc0e62f19ccd744e472c3cfef6af67bb72d8f50146b9fe0bba491a17cf585d95d2ff5601b1465
SSDEEP 12288:XNGG3U3ITEmUbqLELKdrITpxNkBBbD2OVAV7JnsRs5w:LAIAmUbqouuNjk/baOq3sRs5w
TLSH
T191C4D055FBA814F9E173913CCE634606EA717C990370ABCF23944A962F236D19E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-06-03_4d738cbe03d04589a26c040d3044a566_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-03_4d738cbe03d04589a26c040d3044a566_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:2396