General
- Target 2026-07-30_ecc94379ceeb0e7332f2516a9b5ff14e_cobalt-strike_icedid_njrat_satacom_stealc
- Size 693KB
- Sample260730-va1gpawta1
- SHA256 8dc056fc6585b5bc74a41ac5324c9eb3c74c64b201765b5eca9da6242067cafa
- MD5 ecc94379ceeb0e7332f2516a9b5ff14e
- SHA1 24ec4dbcb17e519c5f5ce844b6b96f0e5861e497
- SHA512 7fddc9f691f50037d8b619580647735b010960856fd206251db8ac1a30d50221277595cc74060405e4a81add19e07d93e98439b3a6df92489c1b5ef7cfbf5a54
- SSDEEP 12288:WNGG3U3ITEmUbqLELo3BiZpa8uy87GI503RomLQVlhP:AAIAmUbqoc3BiZpaV0irlhP
- TLSH T1B0E4E115EAA814F9E273C17CCD634A06EA727C9A0771D7CF13A44A562F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_ecc94379ceeb0e7332f2516a9b5ff14e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_ecc94379ceeb0e7332f2516a9b5ff14e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_ecc94379ceeb0e7332f2516a9b5ff14e_cobalt-strike_icedid_njrat_satacom_stealc
- Size 693KB
- SHA256 8dc056fc6585b5bc74a41ac5324c9eb3c74c64b201765b5eca9da6242067cafa
- MD5 ecc94379ceeb0e7332f2516a9b5ff14e
- SHA1 24ec4dbcb17e519c5f5ce844b6b96f0e5861e497
- SHA512 7fddc9f691f50037d8b619580647735b010960856fd206251db8ac1a30d50221277595cc74060405e4a81add19e07d93e98439b3a6df92489c1b5ef7cfbf5a54
- SSDEEP 12288:WNGG3U3ITEmUbqLELo3BiZpa8uy87GI503RomLQVlhP:AAIAmUbqoc3BiZpaV0irlhP
- TLSH T1B0E4E115EAA814F9E273C17CCD634A06EA727C9A0771D7CF13A44A562F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.