General
- Target 2026-07-18_202be98435176aaca77306ab1b2b6c75_cobalt-strike_icedid_njrat_satacom_stealc
- Size 473KB
- Sample260718-bkwrpsft2v
- SHA256 357b90b92773ef0e0eb7fe015e3c7bb0ae7042da8026b16818b374d2c0de1c69
- MD5 202be98435176aaca77306ab1b2b6c75
- SHA1 020bb0650298367088f92c789f58287ae5dfb942
- SHA512 d600f734f61b937cf33651461da30cfaa31b62d675daab4b195dcc579b0cf28c77d77d42ebc95ef5d4dbd172c88f30429a60f1dd16c9ab0e0acab2a0892df915
- SSDEEP 6144:YIcXHtLYbVdzU6tlWyo3YTeHWJuEoGdA/V7Yd66ngecjsJ51eomL:YVdcZ0joK0vV4VMngNsLgH
- TLSH T1F5A4BF15F2B914F9E577817CCD925502EA72BC460770AACF23A04A972F237E09E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_202be98435176aaca77306ab1b2b6c75_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_202be98435176aaca77306ab1b2b6c75_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_202be98435176aaca77306ab1b2b6c75_cobalt-strike_icedid_njrat_satacom_stealc
- Size 473KB
- SHA256 357b90b92773ef0e0eb7fe015e3c7bb0ae7042da8026b16818b374d2c0de1c69
- MD5 202be98435176aaca77306ab1b2b6c75
- SHA1 020bb0650298367088f92c789f58287ae5dfb942
- SHA512 d600f734f61b937cf33651461da30cfaa31b62d675daab4b195dcc579b0cf28c77d77d42ebc95ef5d4dbd172c88f30429a60f1dd16c9ab0e0acab2a0892df915
- SSDEEP 6144:YIcXHtLYbVdzU6tlWyo3YTeHWJuEoGdA/V7Yd66ngecjsJ51eomL:YVdcZ0joK0vV4VMngNsLgH
- TLSH T1F5A4BF15F2B914F9E577817CCD925502EA72BC460770AACF23A04A972F237E09E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.