General
- Target 2026-07-18_209758945dc6a234e463565d8aad51fc_cobalt-strike_icedid_njrat_satacom_stealc
- Size 281KB
- Sample260718-bkvveaft2t
- SHA256 eec734ccd32dac1e1b2a4c34862ff3425dd3b5caa43363b41e80057ee06696f4
- MD5 209758945dc6a234e463565d8aad51fc
- SHA1 c46530b2b03a60114a46a6fdb0fadae182c5df78
- SHA512 41890e46226b605a4effd3ebb491379c1fa5f4fbf7343b22ef06dcb569d07d85d85d9b592be492d37bf15eadebe44f27b149f146dc1774390b1146fede079aa5
- SSDEEP 3072:nOZO9ivYI4Ne032ngqItjcIZa+S01WPMMRsU6XCmTODQvtsDrHznTg8sB2yQias1:yWbNexED1WXuUnn2SDjwhkAqngsZ3M
- TLSH T12B547C15FAA514FAE977817DCD524902EB72BC0247A1EACF03904AA72F277D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_209758945dc6a234e463565d8aad51fc_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_209758945dc6a234e463565d8aad51fc_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_209758945dc6a234e463565d8aad51fc_cobalt-strike_icedid_njrat_satacom_stealc
- Size 281KB
- SHA256 eec734ccd32dac1e1b2a4c34862ff3425dd3b5caa43363b41e80057ee06696f4
- MD5 209758945dc6a234e463565d8aad51fc
- SHA1 c46530b2b03a60114a46a6fdb0fadae182c5df78
- SHA512 41890e46226b605a4effd3ebb491379c1fa5f4fbf7343b22ef06dcb569d07d85d85d9b592be492d37bf15eadebe44f27b149f146dc1774390b1146fede079aa5
- SSDEEP 3072:nOZO9ivYI4Ne032ngqItjcIZa+S01WPMMRsU6XCmTODQvtsDrHznTg8sB2yQias1:yWbNexED1WXuUnn2SDjwhkAqngsZ3M
- TLSH T12B547C15FAA514FAE977817DCD524902EB72BC0247A1EACF03904AA72F277D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE