General
- Target 2026-07-21_0115eff6ef7a17eff9139d98d3d82bc9_cobalt-strike_icedid_njrat_satacom_stealc
- Size 819KB
- Sample260721-dft4esey2s
- SHA256 4632c18f9775c35cbc2e513ad207d5009206207dc242647214de8997a909a878
- MD5 0115eff6ef7a17eff9139d98d3d82bc9
- SHA1 08bc776753bad6880911ae9757503324689f8e52
- SHA512 fecf56a1fca198287d2efe7bdd619998fccb50d1b08209733c2d6a24d1d6dcfca6f11b879c96834eefca233215895f617be816361648c58f397a12299b1e6b4b
- SSDEEP 12288:QNGG3U3ITEmUbqLELGDdNhxLdw5jp1wPBjiOeK2AnwNIxuJ/dY:OAIAmUbqoqD7pw5jp1ojiOf2GU1G
- TLSH T16005F159EBA414F9E277817CCE234601EBB27C594770A7CF139449A62F23AD18E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_0115eff6ef7a17eff9139d98d3d82bc9_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_0115eff6ef7a17eff9139d98d3d82bc9_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_0115eff6ef7a17eff9139d98d3d82bc9_cobalt-strike_icedid_njrat_satacom_stealc
- Size 819KB
- SHA256 4632c18f9775c35cbc2e513ad207d5009206207dc242647214de8997a909a878
- MD5 0115eff6ef7a17eff9139d98d3d82bc9
- SHA1 08bc776753bad6880911ae9757503324689f8e52
- SHA512 fecf56a1fca198287d2efe7bdd619998fccb50d1b08209733c2d6a24d1d6dcfca6f11b879c96834eefca233215895f617be816361648c58f397a12299b1e6b4b
- SSDEEP 12288:QNGG3U3ITEmUbqLELGDdNhxLdw5jp1wPBjiOeK2AnwNIxuJ/dY:OAIAmUbqoqD7pw5jp1ojiOf2GU1G
- TLSH T16005F159EBA414F9E277817CCE234601EBB27C594770A7CF139449A62F23AD18E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.