General
- Target 2026-08-02_690b378804710f916a6cb4b42a578d0b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260802-dkkqjsck9s
- SHA256 7bd536bec8505bb5c61ef7a87af6dfe951b3bf4585284f4fdd26bfde7faa0ce5
- MD5 690b378804710f916a6cb4b42a578d0b
- SHA1 97d8cd337950697968f1d3d828a3678e1e3c6326
- SHA512 47351d684b3a732ab1155b967d0f6be9a34e2c216a65b8f7461767db800e275de63dbefc896e65035c89fd1b53b80201944d85b45a8b5d68218757191802a9aa
- SSDEEP 24576:SNaGc5gWxdhkNEqkjD391zTtEI4qZkGiYUJrxeXyDaUrcyf4l4BLDS2:SYGc5BhgEjjD391ln4IdizJr5Z1S2
- TLSH T17E759F4AA2B800ECD167C17DCA165607EBB274051734ABDF57D08AA62F23EE15F7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_690b378804710f916a6cb4b42a578d0b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_690b378804710f916a6cb4b42a578d0b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_690b378804710f916a6cb4b42a578d0b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 7bd536bec8505bb5c61ef7a87af6dfe951b3bf4585284f4fdd26bfde7faa0ce5
- MD5 690b378804710f916a6cb4b42a578d0b
- SHA1 97d8cd337950697968f1d3d828a3678e1e3c6326
- SHA512 47351d684b3a732ab1155b967d0f6be9a34e2c216a65b8f7461767db800e275de63dbefc896e65035c89fd1b53b80201944d85b45a8b5d68218757191802a9aa
- SSDEEP 24576:SNaGc5gWxdhkNEqkjD391zTtEI4qZkGiYUJrxeXyDaUrcyf4l4BLDS2:SYGc5BhgEjjD391ln4IdizJr5Z1S2
- TLSH T17E759F4AA2B800ECD167C17DCA165607EBB274051734ABDF57D08AA62F23EE15F7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.