General
- Target 2026-07-30_3e8a40ee21b41524903eedbe75227ed4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 747KB
- Sample260730-x8cvdsfl3y
- SHA256 8cb0d9e40d4190308fdd19b6e0675a09755e5c61d629992b05e623a5357c0e11
- MD5 3e8a40ee21b41524903eedbe75227ed4
- SHA1 0d64b4680893248b8a794fae4b90cb75b3208aa7
- SHA512 58b75fc1fd4ec3d0dac1c22f580234dac66449ac4fd126b909cbeb22904f61e5aa589c43c263f89c60ac5fa0d4a7ee956bc6f99150df2e0f216d73fa636e5977
- SSDEEP 12288:jNGG3U3ITEmUbqLELYL8cM15pHjoxFTJirghCGGMHBLl54:3AIAmUbqocU15Nof1F5GAtle
- TLSH T1E6F4E154EBA804F9E177C13CCD678605EA727CAA4760E7CF13948A562F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_3e8a40ee21b41524903eedbe75227ed4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_3e8a40ee21b41524903eedbe75227ed4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_3e8a40ee21b41524903eedbe75227ed4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 747KB
- SHA256 8cb0d9e40d4190308fdd19b6e0675a09755e5c61d629992b05e623a5357c0e11
- MD5 3e8a40ee21b41524903eedbe75227ed4
- SHA1 0d64b4680893248b8a794fae4b90cb75b3208aa7
- SHA512 58b75fc1fd4ec3d0dac1c22f580234dac66449ac4fd126b909cbeb22904f61e5aa589c43c263f89c60ac5fa0d4a7ee956bc6f99150df2e0f216d73fa636e5977
- SSDEEP 12288:jNGG3U3ITEmUbqLELYL8cM15pHjoxFTJirghCGGMHBLl54:3AIAmUbqocU15Nof1F5GAtle
- TLSH T1E6F4E154EBA804F9E177C13CCD678605EA727CAA4760E7CF13948A562F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.