General
- Target 2026-07-14_1336e2be1af3b95343cd901740de5cda_cobalt-strike_icedid_njrat_satacom_stealc
- Size 744KB
- Sample260715-bjef2abw2w
- SHA256 0f981d927c6e21eaa57bed92123b9a4b1152490319dd9146864dbee81515c56b
- MD5 1336e2be1af3b95343cd901740de5cda
- SHA1 fd8ba7de87960937bb2d6ebcd8477f74e2243d3f
- SHA512 87b2a3b467aba0a084ee47cd2e3e9f5c8f7f666c771498d7e9911214b73a1b944dc30b55b34fe17358ee707dd8f1dde3a4b08e5ff12eb7b200f2762cea01774f
- SSDEEP 12288:DNGG3U3ITEmUbqLEL/w9jhMT77JOkA4k5ctHVQM5LuApL:XAIAmUbqoLw8/JOkA4ict1QM5Lui
- TLSH T1E9F4E065EBB814F9E273813CCD638606EA727C694760D7CF139489A62F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_1336e2be1af3b95343cd901740de5cda_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_1336e2be1af3b95343cd901740de5cda_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_1336e2be1af3b95343cd901740de5cda_cobalt-strike_icedid_njrat_satacom_stealc
- Size 744KB
- SHA256 0f981d927c6e21eaa57bed92123b9a4b1152490319dd9146864dbee81515c56b
- MD5 1336e2be1af3b95343cd901740de5cda
- SHA1 fd8ba7de87960937bb2d6ebcd8477f74e2243d3f
- SHA512 87b2a3b467aba0a084ee47cd2e3e9f5c8f7f666c771498d7e9911214b73a1b944dc30b55b34fe17358ee707dd8f1dde3a4b08e5ff12eb7b200f2762cea01774f
- SSDEEP 12288:DNGG3U3ITEmUbqLEL/w9jhMT77JOkA4k5ctHVQM5LuApL:XAIAmUbqoLw8/JOkA4ict1QM5Lui
- TLSH T1E9F4E065EBB814F9E273813CCD638606EA727C694760D7CF139489A62F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.