General
- Target 2026-07-29_5f79adb8d485ca75db7a33c2adc45fa5_cobalt-strike_icedid_njrat_satacom
- Size 1.6MB
- Sample260729-m33thssclg
- SHA256 bb93ed68b33e054e3d24d4075fef749ea1f2a2ab47e65f0ce78f89ec1c3bd989
- MD5 5f79adb8d485ca75db7a33c2adc45fa5
- SHA1 7a30720cbfdb59d514fc588c60a1924dc2b81da7
- SHA512 9323db35a08cf42e8290fb58dc738dc3cbb4129d72013ae29d7f9a7e9825d1f6c0ed7a2ae1af268fd8769e156f92f41f2be9f9fce2e4a633a35c9440efab0152
- SSDEEP 49152:SlWxyQx2SIfroXT6hP8erD01f1VdfEWyhz4:QVnfEOhhrD01xfq
- TLSH T13675F207B6A510F9E177D538C9925906E772BC124F70ABDF03A446A61F23BE09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-29_5f79adb8d485ca75db7a33c2adc45fa5_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_5f79adb8d485ca75db7a33c2adc45fa5_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_5f79adb8d485ca75db7a33c2adc45fa5_cobalt-strike_icedid_njrat_satacom
- Size 1.6MB
- SHA256 bb93ed68b33e054e3d24d4075fef749ea1f2a2ab47e65f0ce78f89ec1c3bd989
- MD5 5f79adb8d485ca75db7a33c2adc45fa5
- SHA1 7a30720cbfdb59d514fc588c60a1924dc2b81da7
- SHA512 9323db35a08cf42e8290fb58dc738dc3cbb4129d72013ae29d7f9a7e9825d1f6c0ed7a2ae1af268fd8769e156f92f41f2be9f9fce2e4a633a35c9440efab0152
- SSDEEP 49152:SlWxyQx2SIfroXT6hP8erD01f1VdfEWyhz4:QVnfEOhhrD01xfq
- TLSH T13675F207B6A510F9E177D538C9925906E772BC124F70ABDF03A446A61F23BE09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.