General
- Target 2026-07-10_7a88d03623ccee6a4c160511fa72b2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.2MB
- Sample260710-md9krshx2m
- SHA256 dff38cb75a98caca2591f9e7b313eb2dd825582e62b39d7f47040249c8c12f66
- MD5 7a88d03623ccee6a4c160511fa72b2fd
- SHA1 00e909222c0c1c28965969d5e1282ae309a474fa
- SHA512 f24d3a92d88da4935366af1237bc8edd3ffd307697831d34d66a084ce9a91662812dd13ca4609b86ab9d6a285c4ab6b0cab40be01593c887413616c48b592f42
- SSDEEP 24576:16sFRjB6uhSsl95CJNRk1yLZhnHEOQUq/KaGkM:16sFRouhsRk1ghHLQUq/Ka
- TLSH T17F555A466E9BC5E9D17BA17FCA460E02D5BEFA01031396CB0B905A753F13AD30D7A3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_7a88d03623ccee6a4c160511fa72b2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_7a88d03623ccee6a4c160511fa72b2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_7a88d03623ccee6a4c160511fa72b2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.2MB
- SHA256 dff38cb75a98caca2591f9e7b313eb2dd825582e62b39d7f47040249c8c12f66
- MD5 7a88d03623ccee6a4c160511fa72b2fd
- SHA1 00e909222c0c1c28965969d5e1282ae309a474fa
- SHA512 f24d3a92d88da4935366af1237bc8edd3ffd307697831d34d66a084ce9a91662812dd13ca4609b86ab9d6a285c4ab6b0cab40be01593c887413616c48b592f42
- SSDEEP 24576:16sFRjB6uhSsl95CJNRk1yLZhnHEOQUq/KaGkM:16sFRouhsRk1ghHLQUq/Ka
- TLSH T17F555A466E9BC5E9D17BA17FCA460E02D5BEFA01031396CB0B905A753F13AD30D7A3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.