General
- Target 2026-07-29_6e4e07d4b2b14dfda9b774514af6fb16_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1001KB
- Sample260729-2jckjsxsfx
- SHA256 bed4971811f39515a2686dedc3c9994ce0f941b926cacb4a4a53a5dc9261b218
- MD5 6e4e07d4b2b14dfda9b774514af6fb16
- SHA1 53b7337b0b081b0287d52cda21a0a698596a3e22
- SHA512 8601447768d126528bdede304915bed9f783cb01cbcfd88dda1779c582e47c58c43d5b7635a9ab4b22d7c5121f49d1921f4b631ed0877121b51f8a7832689c68
- SSDEEP 24576:TAIAmUbqoYeBiZpaYOFAtxRb7EP/0gZIDpCagBOGL4G5JF9c0:T5A5uo9kZpaYlf03FuVgB//Bc0
- TLSH T130250215EAA814F9E173D13CCD634502EAB27C9A4760E7CF13A85A562F33AD48E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_6e4e07d4b2b14dfda9b774514af6fb16_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_6e4e07d4b2b14dfda9b774514af6fb16_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_6e4e07d4b2b14dfda9b774514af6fb16_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1001KB
- SHA256 bed4971811f39515a2686dedc3c9994ce0f941b926cacb4a4a53a5dc9261b218
- MD5 6e4e07d4b2b14dfda9b774514af6fb16
- SHA1 53b7337b0b081b0287d52cda21a0a698596a3e22
- SHA512 8601447768d126528bdede304915bed9f783cb01cbcfd88dda1779c582e47c58c43d5b7635a9ab4b22d7c5121f49d1921f4b631ed0877121b51f8a7832689c68
- SSDEEP 24576:TAIAmUbqoYeBiZpaYOFAtxRb7EP/0gZIDpCagBOGL4G5JF9c0:T5A5uo9kZpaYlf03FuVgB//Bc0
- TLSH T130250215EAA814F9E173D13CCD634502EAB27C9A4760E7CF13A85A562F33AD48E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.