af7b41dd7df1cd79d549e4b79425647f89b552f0b6eca809e57cd573541cbc76

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 16:03

Target
2026-07-03_5e89727eeed8a54bc678c40cd206831a_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 785KB
Sample260703-ththnsht5k
SHA256 af7b41dd7df1cd79d549e4b79425647f89b552f0b6eca809e57cd573541cbc76
MD5 5e89727eeed8a54bc678c40cd206831a
SHA1 53e871ee3d8d3701dcdf2cf2c0af029b2a55c3f5
SHA512 ea5f1b28ae368c82d50e8ea1e0533110b4f89d21277dd93c5980e07fc65f5dc31f77a5fc41631d9d160c5f1fd6c382bf78a6d5f771d6b8f22c90c9e4c2a5b5b9
SSDEEP 12288:GNGG3U3ITEmUbqLEL9Rw6dIHfnlMHE1co0ly0NqdXtNesTQFpA:wAIAmUbqoZRwYIHvlRddN3TwK
TLSH
T11405E115FBA814F9E177C17CC9634602EA727C5A4760ABCF13A48A962F376D08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-03_5e89727eeed8a54bc678c40cd206831a_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-03_5e89727eeed8a54bc678c40cd206831a_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:5688