General
- Target 2026-07-19_ce8e56ffc6e957b84175569e317d67ad_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.3MB
- Sample260719-j944daas5v
- SHA256 46af071c532bf091a71a25f5a3b41a6732976f2e8ea76557fd2a6e44ad3da9aa
- MD5 ce8e56ffc6e957b84175569e317d67ad
- SHA1 f86856af0840707c34b7093994b4ef08b1d79eaf
- SHA512 ce99c98f52565637977a0e819f0674590afd0ed40401ccf794a891e4a3d967ab466983143cc54beb42839c8776d19f792ee92f37a3c0b2b72962d64fba2e85a3
- SSDEEP 49152:avFP890y+bEZLKr8zG21QOCe8Ri7zMK1H1W6of7034S+E7ebHUaFcnsKA8bVT8++:L90BE7GdOaCpW6ozVplN
- TLSH T1DDF5BF46E3E202EAD522C27CC9569313E3317C094722DAD76BD84E565FE7BE02A3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-19_ce8e56ffc6e957b84175569e317d67ad_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_ce8e56ffc6e957b84175569e317d67ad_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_ce8e56ffc6e957b84175569e317d67ad_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.3MB
- SHA256 46af071c532bf091a71a25f5a3b41a6732976f2e8ea76557fd2a6e44ad3da9aa
- MD5 ce8e56ffc6e957b84175569e317d67ad
- SHA1 f86856af0840707c34b7093994b4ef08b1d79eaf
- SHA512 ce99c98f52565637977a0e819f0674590afd0ed40401ccf794a891e4a3d967ab466983143cc54beb42839c8776d19f792ee92f37a3c0b2b72962d64fba2e85a3
- SSDEEP 49152:avFP890y+bEZLKr8zG21QOCe8Ri7zMK1H1W6of7034S+E7ebHUaFcnsKA8bVT8++:L90BE7GdOaCpW6ozVplN
- TLSH T1DDF5BF46E3E202EAD522C27CC9569313E3317C094722DAD76BD84E565FE7BE02A3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.