f304b997dc87540a25fe31e06267e481a8f08ec40381f88b874686ab5ce766d1

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 01:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-13_8ed004eaeecbcf2eaaa3866d72b59f23_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 39.9MB
Sample260714-bcr4jsby2m
SHA256 f304b997dc87540a25fe31e06267e481a8f08ec40381f88b874686ab5ce766d1
MD5 8ed004eaeecbcf2eaaa3866d72b59f23
SHA1 79aa25b0c326cb8b321e912f915b9e2592dbed67
SHA512 fdb00625f4b66f57bdaf17007fb23a1ae1d16d641cc0bcc418b8eda4d092e70c056155198c9f5021bc13981d65357b621c8a2a6d55b5ed7f0544c25a65ae2ec4
SSDEEP 786432:KK97W7JTyROtPhEkSVUqJO6zM10s6rrRbe46JHltK+1W8SbwSga7AX:KK97qVjtDeJzMP4e9Pn1W5bHga7AX
TLSH
T1FE9712E965E151BCC0A2C134E18646FAF4957C490F7888EBBFC25D012B31DE5D8BAB72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2	raw.githubusercontent.com
3	raw.githubusercontent.com

C:\Users\Admin\AppData\Local\Temp\2026-07-13_8ed004eaeecbcf2eaaa3866d72b59f23_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-13_8ed004eaeecbcf2eaaa3866d72b59f23_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:2912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

info.txt

Path C:\Users\Admin\AppData\Local\Temp\info.txt
Size 102B
SHA256 6cca21d20afb9969564ec3a481211a1e5a50636f501de572cbe880b622703e49
MD5 92d2a2f7fddd7bc3730e4a11cdb911ea
SHA1 d0a119c2a3d04637d486169e7998d6982778f4d9
SHA512 9e4f18281ff4ed2d3cc17ecc31c768e40c942354d9f207c4e7597a838e3a83f9e0a66c1f53e397bcd30ec22dab6bef45f7dcaf5f4291851dc6d55ee3cb3feb57
TLSH
T1BBB0120C436B300F04713C45373860D4D6C4E8248B308B0634CC5214F1888660456E24
MD5 SHA1 SHA512 TLSH

Submit Download