General
- Target 2026-07-14_3941731fb340d41d27206e88c7591e50_cobalt-strike_icedid_njrat_satacom_stealc
- Size 933KB
- Sample260715-bb42qabt71
- SHA256 3e241986ebe7ef27132a32ac07f8604910cd8f14170d474521a924c9829ffea8
- MD5 3941731fb340d41d27206e88c7591e50
- SHA1 daab2c4b9fdf6fc2c92fafaf34b56db754cd4a83
- SHA512 7bf0148210a10aa73054777950952ed7e5ceb11941f731a852ad3795b695ce5ca6fa2bb17e68e9337443953c89f67f5dc9254630062a3f83222c11af682842f6
- SSDEEP 24576:EAIAmUbqoB1gbF3VKl2hWtOt9lkSLuhLmdFvf80qBA49:E5A5uo8Fa8gif80aA49
- TLSH T16B15F155EBA914F9E173913CCD634601EA727C9A07B0E7CF13A44A962F23AD48E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_3941731fb340d41d27206e88c7591e50_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_3941731fb340d41d27206e88c7591e50_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_3941731fb340d41d27206e88c7591e50_cobalt-strike_icedid_njrat_satacom_stealc
- Size 933KB
- SHA256 3e241986ebe7ef27132a32ac07f8604910cd8f14170d474521a924c9829ffea8
- MD5 3941731fb340d41d27206e88c7591e50
- SHA1 daab2c4b9fdf6fc2c92fafaf34b56db754cd4a83
- SHA512 7bf0148210a10aa73054777950952ed7e5ceb11941f731a852ad3795b695ce5ca6fa2bb17e68e9337443953c89f67f5dc9254630062a3f83222c11af682842f6
- SSDEEP 24576:EAIAmUbqoB1gbF3VKl2hWtOt9lkSLuhLmdFvf80qBA49:E5A5uo8Fa8gif80aA49
- TLSH T16B15F155EBA914F9E173913CCD634601EA727C9A07B0E7CF13A44A962F23AD48E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1