General
- Target 2026-06-04_3d30f22e64586574d38f8f15c04c8cca_cobalt-strike_icedid_njrat_satacom_stealc
- Size 534KB
- Sample260604-gdz4fabs8k
- SHA256 5ff90e8b7b121ff5844759933cacfa6e3e1bed1af8e5488f08f56e45c78ba02a
- MD5 3d30f22e64586574d38f8f15c04c8cca
- SHA1 d3775b27fc77da91f0c341074cf747228d1306eb
- SHA512 99228aea02becb5652d3813122cf95c4eb3fe20f627b428c312cf277f0558dbdc565054f5a56f6c0a4c29569809a694ec6e54d1d92216072e02dcf2029a949b6
- SSDEEP 6144:kl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz6FeglM2BgaCSWNIcroeXyTk2o4yvVr:INGG3U3ITEmUbqLELm9uIcLC7Pyd4M
- TLSH T11FC4CF15FAA814F9E177C17CCD634606EB727C5A0760ABCF23948A962F236D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_3d30f22e64586574d38f8f15c04c8cca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_3d30f22e64586574d38f8f15c04c8cca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_3d30f22e64586574d38f8f15c04c8cca_cobalt-strike_icedid_njrat_satacom_stealc
- Size 534KB
- SHA256 5ff90e8b7b121ff5844759933cacfa6e3e1bed1af8e5488f08f56e45c78ba02a
- MD5 3d30f22e64586574d38f8f15c04c8cca
- SHA1 d3775b27fc77da91f0c341074cf747228d1306eb
- SHA512 99228aea02becb5652d3813122cf95c4eb3fe20f627b428c312cf277f0558dbdc565054f5a56f6c0a4c29569809a694ec6e54d1d92216072e02dcf2029a949b6
- SSDEEP 6144:kl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz6FeglM2BgaCSWNIcroeXyTk2o4yvVr:INGG3U3ITEmUbqLELm9uIcLC7Pyd4M
- TLSH T11FC4CF15FAA814F9E177C17CCD634606EB727C5A0760ABCF23948A962F236D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.