d3181f7ad665fbcdf91f3f79128d8f523cc820892593963727e5f7e12e68a30b

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 22:48

Target
2026-07-12_0ff6161465466a8716d65f2a9aea9560_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 958KB
Sample260712-2raqxsbw8v
SHA256 d3181f7ad665fbcdf91f3f79128d8f523cc820892593963727e5f7e12e68a30b
MD5 0ff6161465466a8716d65f2a9aea9560
SHA1 d1414897446e610498fb98b88855312ea22f122d
SHA512 efc08cb605a8fcce42a7e69989e1ef633b3b2cbe3b556934c36d76e856d5872ca2e76883f2167691ebadc6bc88eb8f942ed2a2ecabb7a5693a4e9686098da9b7
SSDEEP 24576:4AIAmUbqod3IgupAskY9Ngg0SreOqe40GGTRzPRo:45A5uotu37L3qbw9Ro
TLSH
T1B125F115F7A814F9E273813CCD638605DA727CA94770ABDF13A88A562F236D18E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-12_0ff6161465466a8716d65f2a9aea9560_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-12_0ff6161465466a8716d65f2a9aea9560_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:4308