0305faacbf65e240b06d941e2527f79dcfee685da92714aaeded3b67dd7d15dd

Analysis

max time kernel
150s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 21:35

Target
2026-07-09_1b23e9361b648e5569f9325b16ca06a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 1023KB
Sample260709-1fhfysa13x
SHA256 0305faacbf65e240b06d941e2527f79dcfee685da92714aaeded3b67dd7d15dd
MD5 1b23e9361b648e5569f9325b16ca06a6
SHA1 4ed7a6b24e0d6c9bc4e15bcf660b3a1c0ca2c117
SHA512 ae6d227e88adb9eae4ab89852ee2d07969aac44049c1fd350523cf45e342e83d289e557790a168c51e46a0e9659455a5ca4a4ebd264c65c01eef9e7c0d2982c3
SSDEEP 24576:XAIAmUbqohi15NofQ/bMrSVnVtXxYwRjK0z+vm:X5A5uoWvof+JVnVtxYws0z
TLSH
T144250165EBE804FDE173853CCD634905EA717CAA0760ABDF13948A562F236D09E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-09_1b23e9361b648e5569f9325b16ca06a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-09_1b23e9361b648e5569f9325b16ca06a6_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:5960