bfd09180ff97722e6ac0f6ba03dbc59919481d6c42afc7384f5086362dff4605

Analysis

max time kernel
148s
max time network
119s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 03:52

Target
2026-07-09_15385bde7361b86bd7fe3e99da788b0d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 712KB
Sample260709-efcd2scv3n
SHA256 bfd09180ff97722e6ac0f6ba03dbc59919481d6c42afc7384f5086362dff4605
MD5 15385bde7361b86bd7fe3e99da788b0d
SHA1 051b0e57cf4f509aff6ddb1a591b5af4618c4400
SHA512 5ac4295a9772fcb2a3525118e2f73e8c9d534970175fec74b01061c62d3ca248d0a747678bae72e3fa69590fed449a66784f57c7066d483451f471f443b88970
SSDEEP 12288:NNGG3U3ITEmUbqLEL1DIgD/dn9BDL/3ka49WURkjVT/YaFYzNLEqaX:NAIAmUbqoBDIgD/dn9BDbRTxMqYzNLE5
TLSH
T182F4E115FBA414F9E2778178CD638906EB727C5A076097CF13A44A962F23AD09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-09_15385bde7361b86bd7fe3e99da788b0d_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-09_15385bde7361b86bd7fe3e99da788b0d_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:4412