General
- Target 2026-07-16_ab4e3da301d0f005f7b9354e58422b90_cobalt-strike_icedid_njrat_satacom_stealc
- Size 595KB
- Sample260716-rcmf3aay7y
- SHA256 bdad6a7b1f8450b221f54ab9e1b6801e3a1556252cb6902592c3419e9c7accc3
- MD5 ab4e3da301d0f005f7b9354e58422b90
- SHA1 ec3712e10d96c5996f60f3177609224810987b56
- SHA512 2ac16d46546e184ca20127719d765b6caf76abdac98dc957119eb675f2dc05f6d3f411f2175072e97a10bd3990a67885bd2541c7650cf0d49f5c65c2715afac8
- SSDEEP 12288:uNGG3U3ITEmUbqLELWNQrBhYw5uYLqsMSZRKyLyl:oAIAmUbqoiIhV5wOkN
- TLSH T176D4D055FBA404F9E277C178CD634606EA727C5A07709BCF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_ab4e3da301d0f005f7b9354e58422b90_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_ab4e3da301d0f005f7b9354e58422b90_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_ab4e3da301d0f005f7b9354e58422b90_cobalt-strike_icedid_njrat_satacom_stealc
- Size 595KB
- SHA256 bdad6a7b1f8450b221f54ab9e1b6801e3a1556252cb6902592c3419e9c7accc3
- MD5 ab4e3da301d0f005f7b9354e58422b90
- SHA1 ec3712e10d96c5996f60f3177609224810987b56
- SHA512 2ac16d46546e184ca20127719d765b6caf76abdac98dc957119eb675f2dc05f6d3f411f2175072e97a10bd3990a67885bd2541c7650cf0d49f5c65c2715afac8
- SSDEEP 12288:uNGG3U3ITEmUbqLELWNQrBhYw5uYLqsMSZRKyLyl:oAIAmUbqoiIhV5wOkN
- TLSH T176D4D055FBA404F9E277C178CD634606EA727C5A07709BCF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.