5b423a61e84e2466e19f62593b655788432b81115dc14733cc45ffeff545827b

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 15:02

Target
2026-07-09_177ff312308dc6bd0d47522274439232_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 700KB
Sample260709-sefa7sdv3s
SHA256 5b423a61e84e2466e19f62593b655788432b81115dc14733cc45ffeff545827b
MD5 177ff312308dc6bd0d47522274439232
SHA1 3103e4052b7ab0fce50de47450640eae50397857
SHA512 9d587beb27fe9137c13ee0d75b6542f88ea816dc4042f1de2b79b870609e02df6dc5bf159f2791899ac7a16d042cdd34427291bcbb65e22cea385a798c3af324
SSDEEP 12288:oNGG3U3ITEmUbqLELRnuIcLC7q54CGvAKxMV5DXaOdS+:WAIAmUbqo9nuI8aW4roKx/x+
TLSH
T19DE4D014FBA814F9E2B7817CCD634606EB727C5A0760A7CF13948A961F23AD19E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
3	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-09_177ff312308dc6bd0d47522274439232_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-09_177ff312308dc6bd0d47522274439232_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:1572