General
- Target 2026-06-27_9967abf078c4a01ab311d8eaed917109_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.1MB
- Sample260629-fd8j5sew3m
- SHA256 f68e3273179c34990208af597dfd0bff60bb26821796c158e38354f9d6cea212
- MD5 9967abf078c4a01ab311d8eaed917109
- SHA1 4aa072c9decc9aa1cc04e94697c2d3066f101743
- SHA512 52aaa6966f7a85135ae680cbac4f9151b67b7753684f8e7793956c55229bc65d2515f2d9a4c602f276cf806a69a93b33a52c307edc59866a3f7c2a21a9a03820
- SSDEEP 24576:NAIAmUbqoGKBiZpa9s17Y76bM6adQ0aJfOZLGdQC:N5A5uofkZpa+U7+lV9x9
- TLSH T15E350255EAA814F9E277D13CCDA34602EB727C5A0760DBCF13A449962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_9967abf078c4a01ab311d8eaed917109_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_9967abf078c4a01ab311d8eaed917109_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260618-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_9967abf078c4a01ab311d8eaed917109_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.1MB
- SHA256 f68e3273179c34990208af597dfd0bff60bb26821796c158e38354f9d6cea212
- MD5 9967abf078c4a01ab311d8eaed917109
- SHA1 4aa072c9decc9aa1cc04e94697c2d3066f101743
- SHA512 52aaa6966f7a85135ae680cbac4f9151b67b7753684f8e7793956c55229bc65d2515f2d9a4c602f276cf806a69a93b33a52c307edc59866a3f7c2a21a9a03820
- SSDEEP 24576:NAIAmUbqoGKBiZpa9s17Y76bM6adQ0aJfOZLGdQC:N5A5uofkZpa+U7+lV9x9
- TLSH T15E350255EAA814F9E277D13CCDA34602EB727C5A0760DBCF13A449962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.