General
- Target 2026-07-13_6ac374d8929cd4b2d1a5d228ea3050e1_cobalt-strike_icedid_njrat_satacom_stealc
- Size 809KB
- Sample260713-hsbvtsds3p
- SHA256 c314b893b0d632b163155e2381a11a7eba307203d3b7aba736c6c03bb291ff30
- MD5 6ac374d8929cd4b2d1a5d228ea3050e1
- SHA1 4d81a91587e9678deaf2f12a949652c7b8f0073b
- SHA512 ffb1ef148cfc4a123164da1b33df21d73444e9c492d98da434ab30f8b48cdec24fe1d2b0147d8daf3e86e1d39776bdb01a0429c6a136fe973204148abb5fecd6
- SSDEEP 24576:DAIAmUbqot3BiZpaYfKKSnp6vWR8X8C4X:D5A5uoNkZpaYCKMR8n4X
- TLSH T13D05F215EAA814F9E277813CCD634905EA727C9A0770E7CF13A449962F33AD19E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_6ac374d8929cd4b2d1a5d228ea3050e1_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_6ac374d8929cd4b2d1a5d228ea3050e1_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_6ac374d8929cd4b2d1a5d228ea3050e1_cobalt-strike_icedid_njrat_satacom_stealc
- Size 809KB
- SHA256 c314b893b0d632b163155e2381a11a7eba307203d3b7aba736c6c03bb291ff30
- MD5 6ac374d8929cd4b2d1a5d228ea3050e1
- SHA1 4d81a91587e9678deaf2f12a949652c7b8f0073b
- SHA512 ffb1ef148cfc4a123164da1b33df21d73444e9c492d98da434ab30f8b48cdec24fe1d2b0147d8daf3e86e1d39776bdb01a0429c6a136fe973204148abb5fecd6
- SSDEEP 24576:DAIAmUbqot3BiZpaYfKKSnp6vWR8X8C4X:D5A5uoNkZpaYCKMR8n4X
- TLSH T13D05F215EAA814F9E277813CCD634905EA727C9A0770E7CF13A449962F33AD19E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.