General
- Target 2026-08-01_95aeb3db15f2aa472f448a5db553f681_cobalt-strike_icedid_njrat_satacom_stealc
- Size 973KB
- Sample260801-mss7bshm5w
- SHA256 b7a0febea14daa4110311be25c0314cd8083050ac2529f02b4cff627346cd7c6
- MD5 95aeb3db15f2aa472f448a5db553f681
- SHA1 4c726f385dcfc5b474a79d55a2c8ac3dcd9d25c1
- SHA512 99d60dfc642b36c061ae012819795093b0d2391d634ae828b70a81c3f078c4b6ebb585a738644dc0243ddd579a04f96792ebabaf5a6f0b1cec9d5e012b61ace6
- SSDEEP 24576:J8MRL9l1vs963BQmKSksQjnfL8UM9hfmY:JPL1C6xQEGnj8UghfR
- TLSH T1A2259D49E3E801ECE17B9578C976A61BD632789507309ACF13E0056D2F737E05AB7B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_95aeb3db15f2aa472f448a5db553f681_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_95aeb3db15f2aa472f448a5db553f681_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_95aeb3db15f2aa472f448a5db553f681_cobalt-strike_icedid_njrat_satacom_stealc
- Size 973KB
- SHA256 b7a0febea14daa4110311be25c0314cd8083050ac2529f02b4cff627346cd7c6
- MD5 95aeb3db15f2aa472f448a5db553f681
- SHA1 4c726f385dcfc5b474a79d55a2c8ac3dcd9d25c1
- SHA512 99d60dfc642b36c061ae012819795093b0d2391d634ae828b70a81c3f078c4b6ebb585a738644dc0243ddd579a04f96792ebabaf5a6f0b1cec9d5e012b61ace6
- SSDEEP 24576:J8MRL9l1vs963BQmKSksQjnfL8UM9hfmY:JPL1C6xQEGnj8UghfR
- TLSH T1A2259D49E3E801ECE17B9578C976A61BD632789507309ACF13E0056D2F737E05AB7B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.