General
- Target 2026-06-30_25bea4b22c0cf129e4454f4b72e1abd5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 875KB
- Sample260701-gqs6naft7n
- SHA256 3743295de0f8a7d8091f52509014278155dc5a7f2fb78bb3ac33224cf1059c67
- MD5 25bea4b22c0cf129e4454f4b72e1abd5
- SHA1 391197ad719b64fbd62e06f8326dd8ae7d6f862b
- SHA512 497a8e3d7360357f181fceedef3a179ad6041742cd11eb10e2043c4a9b7217e1298f80a4aeea44aabf5f071a1715dbe485e29610fc29e960c7fc3ac50804de4b
- SSDEEP 24576:YAIAmUbqodLuI8aiuikU0NXw5TQFMyuiQ:Y5A5uoJuB9xkUCX6TqGiQ
- TLSH T11215F115EAA814F9E1B3817CCE674602DB71BC6A0770A7CF13948A962F236D19F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_25bea4b22c0cf129e4454f4b72e1abd5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_25bea4b22c0cf129e4454f4b72e1abd5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_25bea4b22c0cf129e4454f4b72e1abd5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 875KB
- SHA256 3743295de0f8a7d8091f52509014278155dc5a7f2fb78bb3ac33224cf1059c67
- MD5 25bea4b22c0cf129e4454f4b72e1abd5
- SHA1 391197ad719b64fbd62e06f8326dd8ae7d6f862b
- SHA512 497a8e3d7360357f181fceedef3a179ad6041742cd11eb10e2043c4a9b7217e1298f80a4aeea44aabf5f071a1715dbe485e29610fc29e960c7fc3ac50804de4b
- SSDEEP 24576:YAIAmUbqodLuI8aiuikU0NXw5TQFMyuiQ:Y5A5uoJuB9xkUCX6TqGiQ
- TLSH T11215F115EAA814F9E1B3817CCE674602DB71BC6A0770A7CF13948A962F236D19F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.