General
- Target 2026-07-06_28f84278c4a7cced75deb35b5bff590c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 952KB
- Sample260706-16splscw3s
- SHA256 379a6d2b2acad233f6a3a0bcc3cf6216ec3c45a4cb517609eff3e7507ef63a5e
- MD5 28f84278c4a7cced75deb35b5bff590c
- SHA1 41e0f4ff052c293e522b6f578db3544e5d22f937
- SHA512 89e1ebda0aa1aba68f29036d280a41ab1e43d1ff82a9bf0baa1fa92a1edb7f3fdd8e464ec17f2a980c774928ca085d8ba54829975911fdb11a9fdd85a314864b
- SSDEEP 24576:kAIAmUbqoA9pV9tvqr29v0NaKaOcdkbtnC0AeU:k5A5uoUtqr2lkLs2bJCyU
- TLSH T15D250115E7E404F9E2B7853CCA674606DA72BC5A0770A7CF23944A962F336D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_28f84278c4a7cced75deb35b5bff590c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_28f84278c4a7cced75deb35b5bff590c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_28f84278c4a7cced75deb35b5bff590c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 952KB
- SHA256 379a6d2b2acad233f6a3a0bcc3cf6216ec3c45a4cb517609eff3e7507ef63a5e
- MD5 28f84278c4a7cced75deb35b5bff590c
- SHA1 41e0f4ff052c293e522b6f578db3544e5d22f937
- SHA512 89e1ebda0aa1aba68f29036d280a41ab1e43d1ff82a9bf0baa1fa92a1edb7f3fdd8e464ec17f2a980c774928ca085d8ba54829975911fdb11a9fdd85a314864b
- SSDEEP 24576:kAIAmUbqoA9pV9tvqr29v0NaKaOcdkbtnC0AeU:k5A5uoUtqr2lkLs2bJCyU
- TLSH T15D250115E7E404F9E2B7853CCA674606DA72BC5A0770A7CF23944A962F336D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.