General
- Target 2026-07-13_8ed004eaeecbcf2eaaa3866d72b59f23_cobalt-strike_icedid_njrat_satacom_stealc
- Size 39.9MB
- Sample260714-bcr4jsby2m
- SHA256 f304b997dc87540a25fe31e06267e481a8f08ec40381f88b874686ab5ce766d1
- MD5 8ed004eaeecbcf2eaaa3866d72b59f23
- SHA1 79aa25b0c326cb8b321e912f915b9e2592dbed67
- SHA512 fdb00625f4b66f57bdaf17007fb23a1ae1d16d641cc0bcc418b8eda4d092e70c056155198c9f5021bc13981d65357b621c8a2a6d55b5ed7f0544c25a65ae2ec4
- SSDEEP 786432:KK97W7JTyROtPhEkSVUqJO6zM10s6rrRbe46JHltK+1W8SbwSga7AX:KK97qVjtDeJzMP4e9Pn1W5bHga7AX
- TLSH T1FE9712E965E151BCC0A2C134E18646FAF4957C490F7888EBBFC25D012B31DE5D8BAB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-13_8ed004eaeecbcf2eaaa3866d72b59f23_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_8ed004eaeecbcf2eaaa3866d72b59f23_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_8ed004eaeecbcf2eaaa3866d72b59f23_cobalt-strike_icedid_njrat_satacom_stealc
- Size 39.9MB
- SHA256 f304b997dc87540a25fe31e06267e481a8f08ec40381f88b874686ab5ce766d1
- MD5 8ed004eaeecbcf2eaaa3866d72b59f23
- SHA1 79aa25b0c326cb8b321e912f915b9e2592dbed67
- SHA512 fdb00625f4b66f57bdaf17007fb23a1ae1d16d641cc0bcc418b8eda4d092e70c056155198c9f5021bc13981d65357b621c8a2a6d55b5ed7f0544c25a65ae2ec4
- SSDEEP 786432:KK97W7JTyROtPhEkSVUqJO6zM10s6rrRbe46JHltK+1W8SbwSga7AX:KK97qVjtDeJzMP4e9Pn1W5bHga7AX
- TLSH T1FE9712E965E151BCC0A2C134E18646FAF4957C490F7888EBBFC25D012B31DE5D8BAB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.