General
- Target 2026-07-13_04f0fbf00df09f1fa4165addd8d7f2a6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 14.6MB
- Sample260714-cafheaex2z
- SHA256 804674a7e36f4caf0eb37e6c41cb3b2edd5b7385502a6c7dc8ef2c404ad89513
- MD5 04f0fbf00df09f1fa4165addd8d7f2a6
- SHA1 b9b6626c091c32b7b174cc5f2665c707c9a0035e
- SHA512 229617afc08456eead17004c49ba3bd8e4ed689c8da0e6ea337771a05ef3e026f05e2686f22ae81d37452c2b02ce9d7dc02e4e4351eceec0c8db691aabf18b20
- SSDEEP 393216:BvQK97pMyK4awbM18ATsfROtrThEkePV+xqJO6VE:CK97W7JTyROtPhEkSVUqJO6
- TLSH T12CF601E5A5E111F8C0B6C034D14646AAF59138990B7859EF7FC11E812F32BE8EE7DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-13_04f0fbf00df09f1fa4165addd8d7f2a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_04f0fbf00df09f1fa4165addd8d7f2a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_04f0fbf00df09f1fa4165addd8d7f2a6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 14.6MB
- SHA256 804674a7e36f4caf0eb37e6c41cb3b2edd5b7385502a6c7dc8ef2c404ad89513
- MD5 04f0fbf00df09f1fa4165addd8d7f2a6
- SHA1 b9b6626c091c32b7b174cc5f2665c707c9a0035e
- SHA512 229617afc08456eead17004c49ba3bd8e4ed689c8da0e6ea337771a05ef3e026f05e2686f22ae81d37452c2b02ce9d7dc02e4e4351eceec0c8db691aabf18b20
- SSDEEP 393216:BvQK97pMyK4awbM18ATsfROtrThEkePV+xqJO6VE:CK97W7JTyROtPhEkSVUqJO6
- TLSH T12CF601E5A5E111F8C0B6C034D14646AAF59138990B7859EF7FC11E812F32BE8EE7DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.