General
- Target 2026-06-30_2442ba2b85beb297de8e903ee1ae70d7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.9MB
- Sample260701-aegvxscs81
- SHA256 36447a75556c18e115fa49945c8191741a886b9fc62ba909fe05ebc0f605f3bc
- MD5 2442ba2b85beb297de8e903ee1ae70d7
- SHA1 3051649c333694db73a22f7a8d9d668298b25f0a
- SHA512 28105232c4d9d6a5733981b9a7ed9f4d501ca25696ca012dcb181278d5de4ee32c1e5e0cd3dbd4c42f0790a5f3c53baa899387c852eac4724e58dd53078f1ac1
- SSDEEP 49152:K9ZS+fqbnAZOnFMv+A/aONtWbvwluqLcf+6pjfg/ieNzrsSLc+dJKUYHqrsaXgVf:KeZ/uAbFpjfgaEzrsSLcKKJaXg
- TLSH T1FAE5C10AA2B400F8D0A7D179CE46461BEB727449033697DB1790CA662F23FE16F7E725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
8 signatures
Behavioral task
behavioral1
Sample
2026-06-30_2442ba2b85beb297de8e903ee1ae70d7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_2442ba2b85beb297de8e903ee1ae70d7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.9MB
- SHA256 36447a75556c18e115fa49945c8191741a886b9fc62ba909fe05ebc0f605f3bc
- MD5 2442ba2b85beb297de8e903ee1ae70d7
- SHA1 3051649c333694db73a22f7a8d9d668298b25f0a
- SHA512 28105232c4d9d6a5733981b9a7ed9f4d501ca25696ca012dcb181278d5de4ee32c1e5e0cd3dbd4c42f0790a5f3c53baa899387c852eac4724e58dd53078f1ac1
- SSDEEP 49152:K9ZS+fqbnAZOnFMv+A/aONtWbvwluqLcf+6pjfg/ieNzrsSLc+dJKUYHqrsaXgVf:KeZ/uAbFpjfgaEzrsSLcKKJaXg
- TLSH T1FAE5C10AA2B400F8D0A7D179CE46461BEB727449033697DB1790CA662F23FE16F7E725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.