Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 01:52
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-13_04f0fbf00df09f1fa4165addd8d7f2a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_04f0fbf00df09f1fa4165addd8d7f2a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-13_04f0fbf00df09f1fa4165addd8d7f2a6_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 14.6MB
- Sample260714-cafheaex2z
- SHA256 804674a7e36f4caf0eb37e6c41cb3b2edd5b7385502a6c7dc8ef2c404ad89513
- MD5 04f0fbf00df09f1fa4165addd8d7f2a6
- SHA1 b9b6626c091c32b7b174cc5f2665c707c9a0035e
- SHA512 229617afc08456eead17004c49ba3bd8e4ed689c8da0e6ea337771a05ef3e026f05e2686f22ae81d37452c2b02ce9d7dc02e4e4351eceec0c8db691aabf18b20
- SSDEEP 393216:BvQK97pMyK4awbM18ATsfROtrThEkePV+xqJO6VE:CK97W7JTyROtPhEkSVUqJO6
- TLSH T12CF601E5A5E111F8C0B6C034D14646AAF59138990B7859EF7FC11E812F32BE8EE7DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 raw.githubusercontent.com 2 raw.githubusercontent.com
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\info.txt
- Size 102B
- SHA256 6cca21d20afb9969564ec3a481211a1e5a50636f501de572cbe880b622703e49
- MD5 92d2a2f7fddd7bc3730e4a11cdb911ea
- SHA1 d0a119c2a3d04637d486169e7998d6982778f4d9
- SHA512 9e4f18281ff4ed2d3cc17ecc31c768e40c942354d9f207c4e7597a838e3a83f9e0a66c1f53e397bcd30ec22dab6bef45f7dcaf5f4291851dc6d55ee3cb3feb57
- TLSH T1BBB0120C436B300F04713C45373860D4D6C4E8248B308B0634CC5214F1888660456E24
- MD5 SHA1 SHA512 TLSH