General
- Target 2026-07-27_2a3266a5292499c6be2bdbd1caa9ee60_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.3MB
- Sample260727-nnenta1yfx
- SHA256 42b854a56fde63e0e55dcca34bc8c7218e2659ed320581fb5eee4d797dd029c1
- MD5 2a3266a5292499c6be2bdbd1caa9ee60
- SHA1 120cff52a53ba0bc05fcb8922fa681563545833b
- SHA512 973d1e7b295317f0fee97ecaffebd197e9ab146aaec90d209e2adbf4448d795a7de734e32a20830473a9c0d5e9063603962370c70396c0b5f5b06059e00d3b9d
- SSDEEP 49152:XGi9ornTiSP/UVZUCaH/oevZxALy2FE+Gwyw:SOovfXvD2y23G
- TLSH T158B5E01BF2A789EEE3276534DA62271796F5B8260B3A46CB23405913EE9B5C0CDF5310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_2a3266a5292499c6be2bdbd1caa9ee60_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_2a3266a5292499c6be2bdbd1caa9ee60_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_2a3266a5292499c6be2bdbd1caa9ee60_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.3MB
- SHA256 42b854a56fde63e0e55dcca34bc8c7218e2659ed320581fb5eee4d797dd029c1
- MD5 2a3266a5292499c6be2bdbd1caa9ee60
- SHA1 120cff52a53ba0bc05fcb8922fa681563545833b
- SHA512 973d1e7b295317f0fee97ecaffebd197e9ab146aaec90d209e2adbf4448d795a7de734e32a20830473a9c0d5e9063603962370c70396c0b5f5b06059e00d3b9d
- SSDEEP 49152:XGi9ornTiSP/UVZUCaH/oevZxALy2FE+Gwyw:SOovfXvD2y23G
- TLSH T158B5E01BF2A789EEE3276534DA62271796F5B8260B3A46CB23405913EE9B5C0CDF5310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE