General
- Target 2026-07-30_5048328a5e63c9c431123de403d09990_cobalt-strike_icedid_njrat_satacom_stealc
- Size 792KB
- Sample260730-jrqs2afj7v
- SHA256 33a54081dcc85ff1651fe97cdc34da5673b7666947ae253f3f182c7b8def7c0c
- MD5 5048328a5e63c9c431123de403d09990
- SHA1 20cb6253680a3a5639859db157e70eb5509bfded
- SHA512 a13a656d432101dafd1c24a827393c9e99ad465031ad31fbf7535530761af0bc50628138838a44d8e5a6e9c8dbca7fdd0eea8242dc06643347cd2819c55b28f4
- SSDEEP 24576:tAIAmUbqoJa8UAZjkq0lZcVhUzEKmmnp0w:t5A5uowC1kq6iqdmpw
- TLSH T10A05E155FBB414F9E273817CCD738601EA727C9A07609ACF23A449962F236E19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_5048328a5e63c9c431123de403d09990_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_5048328a5e63c9c431123de403d09990_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_5048328a5e63c9c431123de403d09990_cobalt-strike_icedid_njrat_satacom_stealc
- Size 792KB
- SHA256 33a54081dcc85ff1651fe97cdc34da5673b7666947ae253f3f182c7b8def7c0c
- MD5 5048328a5e63c9c431123de403d09990
- SHA1 20cb6253680a3a5639859db157e70eb5509bfded
- SHA512 a13a656d432101dafd1c24a827393c9e99ad465031ad31fbf7535530761af0bc50628138838a44d8e5a6e9c8dbca7fdd0eea8242dc06643347cd2819c55b28f4
- SSDEEP 24576:tAIAmUbqoJa8UAZjkq0lZcVhUzEKmmnp0w:t5A5uowC1kq6iqdmpw
- TLSH T10A05E155FBB414F9E273817CCD738601EA727C9A07609ACF23A449962F236E19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.