General
- Target 2026-07-09_1b23e9361b648e5569f9325b16ca06a6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1023KB
- Sample260709-1fhfysa13x
- SHA256 0305faacbf65e240b06d941e2527f79dcfee685da92714aaeded3b67dd7d15dd
- MD5 1b23e9361b648e5569f9325b16ca06a6
- SHA1 4ed7a6b24e0d6c9bc4e15bcf660b3a1c0ca2c117
- SHA512 ae6d227e88adb9eae4ab89852ee2d07969aac44049c1fd350523cf45e342e83d289e557790a168c51e46a0e9659455a5ca4a4ebd264c65c01eef9e7c0d2982c3
- SSDEEP 24576:XAIAmUbqohi15NofQ/bMrSVnVtXxYwRjK0z+vm:X5A5uoWvof+JVnVtxYws0z
- TLSH T144250165EBE804FDE173853CCD634905EA717CAA0760ABDF13948A562F236D09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_1b23e9361b648e5569f9325b16ca06a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_1b23e9361b648e5569f9325b16ca06a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_1b23e9361b648e5569f9325b16ca06a6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1023KB
- SHA256 0305faacbf65e240b06d941e2527f79dcfee685da92714aaeded3b67dd7d15dd
- MD5 1b23e9361b648e5569f9325b16ca06a6
- SHA1 4ed7a6b24e0d6c9bc4e15bcf660b3a1c0ca2c117
- SHA512 ae6d227e88adb9eae4ab89852ee2d07969aac44049c1fd350523cf45e342e83d289e557790a168c51e46a0e9659455a5ca4a4ebd264c65c01eef9e7c0d2982c3
- SSDEEP 24576:XAIAmUbqohi15NofQ/bMrSVnVtXxYwRjK0z+vm:X5A5uoWvof+JVnVtxYws0z
- TLSH T144250165EBE804FDE173853CCD634905EA717CAA0760ABDF13948A562F236D09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.