General
- Target 2026-07-30_9dd801fefde6ea88dd40eb24f5fa3d46_cobalt-strike_icedid_njrat_satacom_stealc
- Size 705KB
- Sample260730-nd3b5azwh1
- SHA256 27febe173a12c0b8ef48b820c79f311e588983644cf0bddf0fff620b8567cac2
- MD5 9dd801fefde6ea88dd40eb24f5fa3d46
- SHA1 9b20c685f77f8e2a214a182fd2c6676376703413
- SHA512 3dbca55269d09898b2b0136fce5b67cf1212c9bcb2a97d08c4e18f919e8613e209fbff6a5ee79a67f18dd9e0d9e232a7721089e82ddc0588dbf2396bce8b249a
- SSDEEP 12288:wNGG3U3ITEmUbqLEL7i+IyQMaXQTd0FcPppQzOFUm2qWPKb:uAIAmUbqofTIbgTd0FcBpQSWpPKb
- TLSH T104E4E115E7E814F9E2738578CD634605EB727C5A0760EBCF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_9dd801fefde6ea88dd40eb24f5fa3d46_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_9dd801fefde6ea88dd40eb24f5fa3d46_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_9dd801fefde6ea88dd40eb24f5fa3d46_cobalt-strike_icedid_njrat_satacom_stealc
- Size 705KB
- SHA256 27febe173a12c0b8ef48b820c79f311e588983644cf0bddf0fff620b8567cac2
- MD5 9dd801fefde6ea88dd40eb24f5fa3d46
- SHA1 9b20c685f77f8e2a214a182fd2c6676376703413
- SHA512 3dbca55269d09898b2b0136fce5b67cf1212c9bcb2a97d08c4e18f919e8613e209fbff6a5ee79a67f18dd9e0d9e232a7721089e82ddc0588dbf2396bce8b249a
- SSDEEP 12288:wNGG3U3ITEmUbqLEL7i+IyQMaXQTd0FcPppQzOFUm2qWPKb:uAIAmUbqofTIbgTd0FcBpQSWpPKb
- TLSH T104E4E115E7E814F9E2738578CD634605EB727C5A0760EBCF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.