223dedf3632a9335a2b50cf234a907eec233d0a83ca20baa130a65dc3fea9918

Analysis

max time kernel
148s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 20:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-29_85af9e5b94110dda708fea48c3eaf0e9_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 715KB
Sample260729-yztbfst1ev
SHA256 223dedf3632a9335a2b50cf234a907eec233d0a83ca20baa130a65dc3fea9918
MD5 85af9e5b94110dda708fea48c3eaf0e9
SHA1 b2b7e7c9ccf8253a8dc18bc50538b71a1c243798
SHA512 19a0ce8e8dffa8c83686d970d06882e0f5d5678cda0bc7e0175952df9d2c4867fbcb1e400cfa1cadd8b71383145f0ae5d7bc4c6d343ae117eadf180fe3ec2396
SSDEEP 12288:vNGG3U3ITEmUbqLELoO/3ka49WURjv/d/uY/eP8lp/WATU:TAIAmUbqoEOR8v/h083/lo
TLSH
T10AF4E110FBA414F9E273817CCD638606EA727C5A0770D7DB13A449962F27AE19E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-07-29_85af9e5b94110dda708fea48c3eaf0e9_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-29_85af9e5b94110dda708fea48c3eaf0e9_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:1288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads