General
- Target 2026-07-08_456b18356ab5d82999801f8ab923e95f_cobalt-strike_icedid_njrat_satacom_stealc
- Size 676KB
- Sample260708-c794aaaw9m
- SHA256 f01c5c219e696dc33f53a79decc889a1433f5a34d5c447f0bbf7d49499f0b812
- MD5 456b18356ab5d82999801f8ab923e95f
- SHA1 081f853533ccefb2e4a8757e58682969b64eaf7d
- SHA512 a0777a42f4f82780dc809fafc9fec11bd1e7292452981b9d4bb5ad07a89c75399a6e76349b24aeabca08c8e9d4ab48b3c1780ceb540bf464cbd4b2aae60d3070
- SSDEEP 12288:qNGG3U3ITEmUbqLELPN8bNBD1YovnrmMO6ViGiZY6SiC98xy6fX:0AIAmUbqoLN8rqM2eiCCE6/
- TLSH T1CEE4D055FBA414F9E273813CCD634A01EA727C9A0760E7DF23948A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_456b18356ab5d82999801f8ab923e95f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_456b18356ab5d82999801f8ab923e95f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_456b18356ab5d82999801f8ab923e95f_cobalt-strike_icedid_njrat_satacom_stealc
- Size 676KB
- SHA256 f01c5c219e696dc33f53a79decc889a1433f5a34d5c447f0bbf7d49499f0b812
- MD5 456b18356ab5d82999801f8ab923e95f
- SHA1 081f853533ccefb2e4a8757e58682969b64eaf7d
- SHA512 a0777a42f4f82780dc809fafc9fec11bd1e7292452981b9d4bb5ad07a89c75399a6e76349b24aeabca08c8e9d4ab48b3c1780ceb540bf464cbd4b2aae60d3070
- SSDEEP 12288:qNGG3U3ITEmUbqLELPN8bNBD1YovnrmMO6ViGiZY6SiC98xy6fX:0AIAmUbqoLN8rqM2eiCCE6/
- TLSH T1CEE4D055FBA414F9E273813CCD634A01EA727C9A0760E7DF23948A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.