General
- Target 2026-07-01_25b52810338101472139916d5de90612_cobalt-strike_icedid_njrat_satacom_stealc
- Size 808KB
- Sample260702-anc84agw9k
- SHA256 627c59755006de85a8b387c5261270a66ea40b9848628d769a4949f0f61c6ea3
- MD5 25b52810338101472139916d5de90612
- SHA1 02662ebfd161b4b32e782e2b47359b03cd50dec4
- SHA512 18ddef870279a4ace193d05571c1d6cb881298485b90eccfe18c4673eb96070e553e4286fc96e3997beed1fce1ca92f0a3bf6a61ee6b5e6ece94e8a9efd9c7f1
- SSDEEP 12288:zNGG3U3ITEmUbqLELT2t41Jo2U0yBNPn4Ry9tFXvRGFqfUOmC/sX34X:HAIAmUbqoX2t4PofBNPn4I9lXSXoX
- TLSH T11405E114EBA814F9E277C17CCD734501DA727CAA476196CF23A48A962F37AD08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_25b52810338101472139916d5de90612_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_25b52810338101472139916d5de90612_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_25b52810338101472139916d5de90612_cobalt-strike_icedid_njrat_satacom_stealc
- Size 808KB
- SHA256 627c59755006de85a8b387c5261270a66ea40b9848628d769a4949f0f61c6ea3
- MD5 25b52810338101472139916d5de90612
- SHA1 02662ebfd161b4b32e782e2b47359b03cd50dec4
- SHA512 18ddef870279a4ace193d05571c1d6cb881298485b90eccfe18c4673eb96070e553e4286fc96e3997beed1fce1ca92f0a3bf6a61ee6b5e6ece94e8a9efd9c7f1
- SSDEEP 12288:zNGG3U3ITEmUbqLELT2t41Jo2U0yBNPn4Ry9tFXvRGFqfUOmC/sX34X:HAIAmUbqoX2t4PofBNPn4I9lXSXoX
- TLSH T11405E114EBA814F9E277C17CCD734501DA727CAA476196CF23A48A962F37AD08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.