58695515542a70d3e21db19d571047f4cf9332be6d1200abd1019a5c22341b11

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 00:58

Target
2026-06-30_0865719b58c5c19ce98c597b0fef997b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 871KB
Sample260701-bbv4tabx9j
SHA256 58695515542a70d3e21db19d571047f4cf9332be6d1200abd1019a5c22341b11
MD5 0865719b58c5c19ce98c597b0fef997b
SHA1 1bcc1de7f29f0f622a1f03162833fd4750321853
SHA512 5f0b24e4a0e35784e0279a284748bfd5dc1e72ed586303bf54404f7056e860c21d632828f5b955403302c20c91120725bc34b6f75990eade6d4b3d78ce70a192
SSDEEP 24576:GAIAmUbqo5RNjk/baOUcbhyqN0uA07OP3v8PEjfBG:G5A5uoRk/ycfA074v8cjJG
TLSH
T1C515F114E7A814F9E273813CCD634A06EB727CA947719BCF13944A562F27AD09E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-06-30_0865719b58c5c19ce98c597b0fef997b_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-30_0865719b58c5c19ce98c597b0fef997b_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:4256