66c65a514c9a8e365502415307a192063ebe99d4b5e22062fb78f31a7067ea3d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 04:26

Target
2026-07-14_18b2374b25044a0f88d55191eb1b3045_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 866KB
Sample260714-e22k3agv4w
SHA256 66c65a514c9a8e365502415307a192063ebe99d4b5e22062fb78f31a7067ea3d
MD5 18b2374b25044a0f88d55191eb1b3045
SHA1 14477f8dbf159c4f709f7d8723f80bb74e4be454
SHA512 fbf3cdf1a14c3c96136346a9e9864e83f183ce0c882f71fdb53a875344f475a61946fffac11c75b529540c78dc119a426344bdeb804eb019ee8754f6885251f5
SSDEEP 24576:iAIAmUbqog1BiZpaYgvNZuY2qm+iBmeqR6jh:i5A5uoOkZpaYgPx9mLmeG6N
TLSH
T16915F215FAA814F9E177817CCDA34606EAB27C5A0770D7CF13944AA62F23AD09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
3	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-14_18b2374b25044a0f88d55191eb1b3045_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-14_18b2374b25044a0f88d55191eb1b3045_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:3244