General
- Target 2026-07-09_15385bde7361b86bd7fe3e99da788b0d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 712KB
- Sample260709-efcd2scv3n
- SHA256 bfd09180ff97722e6ac0f6ba03dbc59919481d6c42afc7384f5086362dff4605
- MD5 15385bde7361b86bd7fe3e99da788b0d
- SHA1 051b0e57cf4f509aff6ddb1a591b5af4618c4400
- SHA512 5ac4295a9772fcb2a3525118e2f73e8c9d534970175fec74b01061c62d3ca248d0a747678bae72e3fa69590fed449a66784f57c7066d483451f471f443b88970
- SSDEEP 12288:NNGG3U3ITEmUbqLEL1DIgD/dn9BDL/3ka49WURkjVT/YaFYzNLEqaX:NAIAmUbqoBDIgD/dn9BDbRTxMqYzNLE5
- TLSH T182F4E115FBA414F9E2778178CD638906EB727C5A076097CF13A44A962F23AD09E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_15385bde7361b86bd7fe3e99da788b0d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_15385bde7361b86bd7fe3e99da788b0d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_15385bde7361b86bd7fe3e99da788b0d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 712KB
- SHA256 bfd09180ff97722e6ac0f6ba03dbc59919481d6c42afc7384f5086362dff4605
- MD5 15385bde7361b86bd7fe3e99da788b0d
- SHA1 051b0e57cf4f509aff6ddb1a591b5af4618c4400
- SHA512 5ac4295a9772fcb2a3525118e2f73e8c9d534970175fec74b01061c62d3ca248d0a747678bae72e3fa69590fed449a66784f57c7066d483451f471f443b88970
- SSDEEP 12288:NNGG3U3ITEmUbqLEL1DIgD/dn9BDL/3ka49WURkjVT/YaFYzNLEqaX:NAIAmUbqoBDIgD/dn9BDbRTxMqYzNLE5
- TLSH T182F4E115FBA414F9E2778178CD638906EB727C5A076097CF13A44A962F23AD09E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1