General
- Target 2026-07-21_4a6d709d4b95d351aeceece483d94493_cobalt-strike_icedid_njrat_satacom_stealc
- Size 896KB
- Sample260721-vy3lysda97
- SHA256 96b7d84a49575321c85a18158c0ddde802127b102d6155d7238a3b958748be71
- MD5 4a6d709d4b95d351aeceece483d94493
- SHA1 42d9f8a0e885cc32f19abba88272700eca090986
- SHA512 ee96dbca70bea76be3e021fe39b45035418b1f03fbd8e217389dba64d62c0a7c7ab42be42284c789476337e1627a72bc3a947dc5c03f14088676f59d988b02f2
- SSDEEP 24576:NAIAmUbqo+dRK/nsVtEnE4bSCp0xBQwVWbWUJC:N5A5uoCFwnE4bSztWbRJC
- TLSH T1FD15F115FBA804F9E177C578CE634601EA727C9A07709BDF13948AA62F236D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_4a6d709d4b95d351aeceece483d94493_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_4a6d709d4b95d351aeceece483d94493_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_4a6d709d4b95d351aeceece483d94493_cobalt-strike_icedid_njrat_satacom_stealc
- Size 896KB
- SHA256 96b7d84a49575321c85a18158c0ddde802127b102d6155d7238a3b958748be71
- MD5 4a6d709d4b95d351aeceece483d94493
- SHA1 42d9f8a0e885cc32f19abba88272700eca090986
- SHA512 ee96dbca70bea76be3e021fe39b45035418b1f03fbd8e217389dba64d62c0a7c7ab42be42284c789476337e1627a72bc3a947dc5c03f14088676f59d988b02f2
- SSDEEP 24576:NAIAmUbqo+dRK/nsVtEnE4bSCp0xBQwVWbWUJC:N5A5uoCFwnE4bSztWbRJC
- TLSH T1FD15F115FBA804F9E177C578CE634601EA727C9A07709BDF13948AA62F236D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.