General
- Target 2026-08-01_abd586fd9ac43697be500f616d0f1971_cobalt-strike_icedid_njrat_satacom_stealc
- Size 494KB
- Sample260801-das9yadj81
- SHA256 164c348bfd90af1b437d7e3dd7546c249efd2a0e83da6163942b9b9a36042467
- MD5 abd586fd9ac43697be500f616d0f1971
- SHA1 77645d90b9f011c8207e83d30581fd7a40147825
- SHA512 d5b9cd42510ccc6d9fca590c0ac3ea4309203a1f61ef4e7b35d6d7004d0d4756fedf87c0553bef8ef745304e430d691838a438c229992bf257a09980c3d1c76f
- SSDEEP 12288:2NhG7X2CwbkfrPOjVwQDKOenHh+qijk4IdaJ/7YLEOv:skj9QWZHc9jk3I/70EO
- TLSH T1D4B47CA2E7A806FDE163D278CA534906F77278460331AACF039096761F17AE55E3FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-01_abd586fd9ac43697be500f616d0f1971_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_abd586fd9ac43697be500f616d0f1971_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_abd586fd9ac43697be500f616d0f1971_cobalt-strike_icedid_njrat_satacom_stealc
- Size 494KB
- SHA256 164c348bfd90af1b437d7e3dd7546c249efd2a0e83da6163942b9b9a36042467
- MD5 abd586fd9ac43697be500f616d0f1971
- SHA1 77645d90b9f011c8207e83d30581fd7a40147825
- SHA512 d5b9cd42510ccc6d9fca590c0ac3ea4309203a1f61ef4e7b35d6d7004d0d4756fedf87c0553bef8ef745304e430d691838a438c229992bf257a09980c3d1c76f
- SSDEEP 12288:2NhG7X2CwbkfrPOjVwQDKOenHh+qijk4IdaJ/7YLEOv:skj9QWZHc9jk3I/70EO
- TLSH T1D4B47CA2E7A806FDE163D278CA534906F77278460331AACF039096761F17AE55E3FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.