General
- Target 2026-07-12_0ff6161465466a8716d65f2a9aea9560_cobalt-strike_icedid_njrat_satacom_stealc
- Size 958KB
- Sample260712-2raqxsbw8v
- SHA256 d3181f7ad665fbcdf91f3f79128d8f523cc820892593963727e5f7e12e68a30b
- MD5 0ff6161465466a8716d65f2a9aea9560
- SHA1 d1414897446e610498fb98b88855312ea22f122d
- SHA512 efc08cb605a8fcce42a7e69989e1ef633b3b2cbe3b556934c36d76e856d5872ca2e76883f2167691ebadc6bc88eb8f942ed2a2ecabb7a5693a4e9686098da9b7
- SSDEEP 24576:4AIAmUbqod3IgupAskY9Ngg0SreOqe40GGTRzPRo:45A5uotu37L3qbw9Ro
- TLSH T1B125F115F7A814F9E273813CCD638605DA727CA94770ABDF13A88A562F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_0ff6161465466a8716d65f2a9aea9560_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_0ff6161465466a8716d65f2a9aea9560_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_0ff6161465466a8716d65f2a9aea9560_cobalt-strike_icedid_njrat_satacom_stealc
- Size 958KB
- SHA256 d3181f7ad665fbcdf91f3f79128d8f523cc820892593963727e5f7e12e68a30b
- MD5 0ff6161465466a8716d65f2a9aea9560
- SHA1 d1414897446e610498fb98b88855312ea22f122d
- SHA512 efc08cb605a8fcce42a7e69989e1ef633b3b2cbe3b556934c36d76e856d5872ca2e76883f2167691ebadc6bc88eb8f942ed2a2ecabb7a5693a4e9686098da9b7
- SSDEEP 24576:4AIAmUbqod3IgupAskY9Ngg0SreOqe40GGTRzPRo:45A5uotu37L3qbw9Ro
- TLSH T1B125F115F7A814F9E273813CCD638605DA727CA94770ABDF13A88A562F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.