c606c3ad44ad32d07c3be15ce94c54d8cd0c929d2c82bffc0c3c420d70c54f40

Analysis

max time kernel
148s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 07:18

Target
2026-07-14_1194032ac893915efe9c879204ae2af0_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 777KB
Sample260714-h5eggsa15x
SHA256 c606c3ad44ad32d07c3be15ce94c54d8cd0c929d2c82bffc0c3c420d70c54f40
MD5 1194032ac893915efe9c879204ae2af0
SHA1 c8a2f61722daa60ecbcc55ea62346ab5c7b76663
SHA512 80a76dcbd785c47e24f6fa54299a3d799625021ec9a03d77a42eaf66ce2ba32b730bbc65d88024533695873f907510b475ba12050b82aa736e0e4d88bdf06e37
SSDEEP 24576:BAIAmUbqo0Y8UAZjkq0lZcVhUzEKmmnpy5m:B5A5uotC1kq6iqdmE
TLSH
T10C05E155E7B414F9E273C17CCD638602EE727C5A076096CF23A489962F236D19E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-14_1194032ac893915efe9c879204ae2af0_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-14_1194032ac893915efe9c879204ae2af0_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:1004