General
- Target 2026-07-11_01be5483de5265189a7d062b46d31b65_cobalt-strike_icedid_njrat_satacom_stealc
- Size 752KB
- Sample260711-nh8ppsa17w
- SHA256 1003eae1ca897a4add3efa980e005470f8e87757f2f268f7c5b3a1ff194847be
- MD5 01be5483de5265189a7d062b46d31b65
- SHA1 c6a7cf654da9d20a1634d5315bbbbb1bf9214c94
- SHA512 b57df73ea00e413c7bcdc8221446521b7490846c075b7babfc2e5eeb81548edb59ae27bc925e6f28e7b9ba209b2aa4c4fdbe7a478ef67232ea0b6b63b7905416
- SSDEEP 12288:FNGG3U3ITEmUbqLELcD/RMSCby5tGAKX24Cl/mNNwoq0TGLa:1AIAmUbqowzRMkt9j/mXBh
- TLSH T1D3F4F115FBA414F9E2B3913CCD634606DA727C6A076097CF23A44A962F27AD0DE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_01be5483de5265189a7d062b46d31b65_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_01be5483de5265189a7d062b46d31b65_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_01be5483de5265189a7d062b46d31b65_cobalt-strike_icedid_njrat_satacom_stealc
- Size 752KB
- SHA256 1003eae1ca897a4add3efa980e005470f8e87757f2f268f7c5b3a1ff194847be
- MD5 01be5483de5265189a7d062b46d31b65
- SHA1 c6a7cf654da9d20a1634d5315bbbbb1bf9214c94
- SHA512 b57df73ea00e413c7bcdc8221446521b7490846c075b7babfc2e5eeb81548edb59ae27bc925e6f28e7b9ba209b2aa4c4fdbe7a478ef67232ea0b6b63b7905416
- SSDEEP 12288:FNGG3U3ITEmUbqLELcD/RMSCby5tGAKX24Cl/mNNwoq0TGLa:1AIAmUbqowzRMkt9j/mXBh
- TLSH T1D3F4F115FBA414F9E2B3913CCD634606DA727C6A076097CF23A44A962F27AD0DE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.