General
- Target 2026-07-09_122a4e0e3e20d55648a1b7408b9deedf_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.0MB
- Sample260709-1f9v7sa15t
- SHA256 6f128b5afbff9f895a088501f5f7e87ad9806cdd595439287b72eab9a86b8c5e
- MD5 122a4e0e3e20d55648a1b7408b9deedf
- SHA1 3e16a45615fe761ed92eccd1462e58447e29ad7f
- SHA512 fb6eda80b31cf57dc885ab9250163dafa51107b319889fcbc48d73157f99de242b5fb37d1ef245ad92ec8812d910bfde81b5fe9577d57b16be43a45ff3d5e56d
- SSDEEP 24576:wAIAmUbqobCNjk/baOqexMdoP1vQQleMr6TO6UjALR:w5A5uosk/oexMUQ6VWRU4
- TLSH T154250255E6A814F9E273817CC9638606DBB27C9A476097CF23D44A962F336C09E3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_122a4e0e3e20d55648a1b7408b9deedf_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_122a4e0e3e20d55648a1b7408b9deedf_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_122a4e0e3e20d55648a1b7408b9deedf_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.0MB
- SHA256 6f128b5afbff9f895a088501f5f7e87ad9806cdd595439287b72eab9a86b8c5e
- MD5 122a4e0e3e20d55648a1b7408b9deedf
- SHA1 3e16a45615fe761ed92eccd1462e58447e29ad7f
- SHA512 fb6eda80b31cf57dc885ab9250163dafa51107b319889fcbc48d73157f99de242b5fb37d1ef245ad92ec8812d910bfde81b5fe9577d57b16be43a45ff3d5e56d
- SSDEEP 24576:wAIAmUbqobCNjk/baOqexMdoP1vQQleMr6TO6UjALR:w5A5uosk/oexMUQ6VWRU4
- TLSH T154250255E6A814F9E273817CC9638606DBB27C9A476097CF23D44A962F336C09E3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.