General
- Target 2026-07-18_985eb76ff46e0d16edfb593dabf90c98_cobalt-strike_icedid_njrat_satacom_stealc
- Size 693KB
- Sample260718-s7cqsah16y
- SHA256 e49cbd250d538e355fab09cd46b4f3407e1bc41b52e6e5805017717b731d1e52
- MD5 985eb76ff46e0d16edfb593dabf90c98
- SHA1 5c75b1928a38c0f48df23beae364bf424a47a541
- SHA512 b8d653a599f29013cb14d9c8daa46ff7cd450e0ec2a17385611851ac7d18d7311dd50472ec6e1551b00f60cabec1f243d72a8fa66780dcf02ed418b83e92dc5c
- SSDEEP 12288:lVdcZ0joKrvVtZoP0aZLIKiiL3xIWysguEN7yBH:jdG08mKL4iLC56EAh
- TLSH T16DE4E155E3A514FAE177C17CCD924805EA72BC4647709ACF23A04A972F237E09E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_985eb76ff46e0d16edfb593dabf90c98_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_985eb76ff46e0d16edfb593dabf90c98_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_985eb76ff46e0d16edfb593dabf90c98_cobalt-strike_icedid_njrat_satacom_stealc
- Size 693KB
- SHA256 e49cbd250d538e355fab09cd46b4f3407e1bc41b52e6e5805017717b731d1e52
- MD5 985eb76ff46e0d16edfb593dabf90c98
- SHA1 5c75b1928a38c0f48df23beae364bf424a47a541
- SHA512 b8d653a599f29013cb14d9c8daa46ff7cd450e0ec2a17385611851ac7d18d7311dd50472ec6e1551b00f60cabec1f243d72a8fa66780dcf02ed418b83e92dc5c
- SSDEEP 12288:lVdcZ0joKrvVtZoP0aZLIKiiL3xIWysguEN7yBH:jdG08mKL4iLC56EAh
- TLSH T16DE4E155E3A514FAE177C17CCD924805EA72BC4647709ACF23A04A972F237E09E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.