General
- Target 2026-07-20_2409104fd0651f5395bef5e0bc0d7fd1_cobalt-strike_icedid_njrat_satacom_stealc
- Size 771KB
- Sample260720-zgmxdset9r
- SHA256 18a364125462f399e2343d7af19693e7501591bb6cf0c479043177e30474213c
- MD5 2409104fd0651f5395bef5e0bc0d7fd1
- SHA1 6441f162c3fbd719a2a6f5897d82924c7eca9b26
- SHA512 d3da9a881082b7aa025042f658a7272b1583ff721afc4b3452fbd1d5aa6542f023563c8402deb3f75f59e4fc7ed13866332b265f6ebcff59c997aa3832aa9f52
- SSDEEP 12288:pNGG3U3ITEmUbqLELD+srUiDD+fHri8fY/AI9SJOhPC9V1Y:ZAIAmUbqo/s4D+fdfYPhPmg
- TLSH T14BF4E125EBA914F9E277D13CCD638605DA717C9A0760EBCF13A44A961F23AD08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_2409104fd0651f5395bef5e0bc0d7fd1_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_2409104fd0651f5395bef5e0bc0d7fd1_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2409104fd0651f5395bef5e0bc0d7fd1_cobalt-strike_icedid_njrat_satacom_stealc
- Size 771KB
- SHA256 18a364125462f399e2343d7af19693e7501591bb6cf0c479043177e30474213c
- MD5 2409104fd0651f5395bef5e0bc0d7fd1
- SHA1 6441f162c3fbd719a2a6f5897d82924c7eca9b26
- SHA512 d3da9a881082b7aa025042f658a7272b1583ff721afc4b3452fbd1d5aa6542f023563c8402deb3f75f59e4fc7ed13866332b265f6ebcff59c997aa3832aa9f52
- SSDEEP 12288:pNGG3U3ITEmUbqLELD+srUiDD+fHri8fY/AI9SJOhPC9V1Y:ZAIAmUbqo/s4D+fdfYPhPmg
- TLSH T14BF4E125EBA914F9E277D13CCD638605DA717C9A0760EBCF13A44A961F23AD08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.