General
- Target 2026-07-30_2609121b6a50146e9c380b1a61e365b4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 768KB
- Sample260730-jtk1kafk2y
- SHA256 738871f1dc664b4f4dfd34ee68ad29e6ba7705585faf19c02845533fe9e45d7b
- MD5 2609121b6a50146e9c380b1a61e365b4
- SHA1 20d3b9360184624f876eea2856d7ec21c145e662
- SHA512 ce9cbfebd1ea46a0799b3f45183970796037ab1dbf686748ef17db43d34d73d38930f1b9723c155b1d14d44d5828500097f6f671c602459f43737461ce6e5909
- SSDEEP 12288:ANGG3U3ITEmUbqLELdsi4iWxs5QR1bMUi1uM4vmDt/N:+AIAmUbqoJQda2R1D6f1r
- TLSH T114F4E154E7A414F9E273C17CCE678506EA727C590760EBCF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_2609121b6a50146e9c380b1a61e365b4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_2609121b6a50146e9c380b1a61e365b4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_2609121b6a50146e9c380b1a61e365b4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 768KB
- SHA256 738871f1dc664b4f4dfd34ee68ad29e6ba7705585faf19c02845533fe9e45d7b
- MD5 2609121b6a50146e9c380b1a61e365b4
- SHA1 20d3b9360184624f876eea2856d7ec21c145e662
- SHA512 ce9cbfebd1ea46a0799b3f45183970796037ab1dbf686748ef17db43d34d73d38930f1b9723c155b1d14d44d5828500097f6f671c602459f43737461ce6e5909
- SSDEEP 12288:ANGG3U3ITEmUbqLELdsi4iWxs5QR1bMUi1uM4vmDt/N:+AIAmUbqoJQda2R1D6f1r
- TLSH T114F4E154E7A414F9E273C17CCE678506EA727C590760EBCF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.