General
- Target 2026-07-23_ecbedbb2e60f174e10deea2bb46c2d60_cobalt-strike_icedid_njrat_satacom_stealc
- Size 827KB
- Sample260724-bedc6sel7x
- SHA256 92e6b60e135105141a07c68b17ef1a9d66978a1c67181d6b960569a7bfddb7b4
- MD5 ecbedbb2e60f174e10deea2bb46c2d60
- SHA1 e5f017a2958a7db6972fe6582b835577b1f4f277
- SHA512 eb36d8dd9344beea25215c65d33d230f86e726cf5c719757bdf8793998eecca48fe575bb283b51135ea53c1d3f1963b8b00875d8af63e83562535c5a8dc3cccd
- SSDEEP 24576:TdG082kzUhzIoRJcp2KB6vqu/PM4Hrpjoj:TdGUgIcojlKBkJ90j
- TLSH T10405E114F76914FDE577817CCA825502EAB2BC460770AADF23A045A72F237E09E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_ecbedbb2e60f174e10deea2bb46c2d60_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_ecbedbb2e60f174e10deea2bb46c2d60_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_ecbedbb2e60f174e10deea2bb46c2d60_cobalt-strike_icedid_njrat_satacom_stealc
- Size 827KB
- SHA256 92e6b60e135105141a07c68b17ef1a9d66978a1c67181d6b960569a7bfddb7b4
- MD5 ecbedbb2e60f174e10deea2bb46c2d60
- SHA1 e5f017a2958a7db6972fe6582b835577b1f4f277
- SHA512 eb36d8dd9344beea25215c65d33d230f86e726cf5c719757bdf8793998eecca48fe575bb283b51135ea53c1d3f1963b8b00875d8af63e83562535c5a8dc3cccd
- SSDEEP 24576:TdG082kzUhzIoRJcp2KB6vqu/PM4Hrpjoj:TdGUgIcojlKBkJ90j
- TLSH T10405E114F76914FDE577817CCA825502EAB2BC460770AADF23A045A72F237E09E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.