5ff90e8b7b121ff5844759933cacfa6e3e1bed1af8e5488f08f56e45c78ba02a

Analysis

max time kernel
149s
max time network
139s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 05:42

Target
2026-06-04_3d30f22e64586574d38f8f15c04c8cca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 534KB
Sample260604-gdz4fabs8k
SHA256 5ff90e8b7b121ff5844759933cacfa6e3e1bed1af8e5488f08f56e45c78ba02a
MD5 3d30f22e64586574d38f8f15c04c8cca
SHA1 d3775b27fc77da91f0c341074cf747228d1306eb
SHA512 99228aea02becb5652d3813122cf95c4eb3fe20f627b428c312cf277f0558dbdc565054f5a56f6c0a4c29569809a694ec6e54d1d92216072e02dcf2029a949b6
SSDEEP 6144:kl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz6FeglM2BgaCSWNIcroeXyTk2o4yvVr:INGG3U3ITEmUbqLELm9uIcLC7Pyd4M
TLSH
T11FC4CF15FAA814F9E177C17CCD634606EB727C5A0760ABCF23948A962F236D09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-06-04_3d30f22e64586574d38f8f15c04c8cca_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_3d30f22e64586574d38f8f15c04c8cca_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:3224