379a6d2b2acad233f6a3a0bcc3cf6216ec3c45a4cb517609eff3e7507ef63a5e

Analysis

max time kernel
148s
max time network
98s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 22:16

Target
2026-07-06_28f84278c4a7cced75deb35b5bff590c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 952KB
Sample260706-16splscw3s
SHA256 379a6d2b2acad233f6a3a0bcc3cf6216ec3c45a4cb517609eff3e7507ef63a5e
MD5 28f84278c4a7cced75deb35b5bff590c
SHA1 41e0f4ff052c293e522b6f578db3544e5d22f937
SHA512 89e1ebda0aa1aba68f29036d280a41ab1e43d1ff82a9bf0baa1fa92a1edb7f3fdd8e464ec17f2a980c774928ca085d8ba54829975911fdb11a9fdd85a314864b
SSDEEP 24576:kAIAmUbqoA9pV9tvqr29v0NaKaOcdkbtnC0AeU:k5A5uoUtqr2lkLs2bJCyU
TLSH
T15D250115E7E404F9E2B7853CCA674606DA72BC5A0770A7CF23944A962F336D18E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-06_28f84278c4a7cced75deb35b5bff590c_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-06_28f84278c4a7cced75deb35b5bff590c_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:5972