General
- Target 2026-08-02_a8226007b945d5b61c47443899d0e179_cobalt-strike_icedid_njrat_satacom_stealc
- Size 891KB
- Sample260802-m5qlza1fkh
- SHA256 2129c470d35ddc49fcf7179f62534a075f4e56209daf7fab0c1c35d9acfafdaf
- MD5 a8226007b945d5b61c47443899d0e179
- SHA1 77dc9127c8069db64da2a2f6020373a358881ba8
- SHA512 1babeb2859e379618a5e670f0f7dd0dba24c03433ced9924eb8973912764e6fb571059a1e1dcc8fec289e815440a1283e77303e7069b912bd78e1a831ca08b13
- SSDEEP 12288:+Sz7kYWFwdxU4jr3eskLHTwnVGPZ9WUNdcyEJMf5m4ozAUicnYox2I:hom/jWzsGPZIAQyf5m8UicnYI2
- TLSH T141159D19F2A801FDD077D078CA929A07EA72785A07305ADF23E04A5A3F636F45E7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_a8226007b945d5b61c47443899d0e179_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_a8226007b945d5b61c47443899d0e179_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a8226007b945d5b61c47443899d0e179_cobalt-strike_icedid_njrat_satacom_stealc
- Size 891KB
- SHA256 2129c470d35ddc49fcf7179f62534a075f4e56209daf7fab0c1c35d9acfafdaf
- MD5 a8226007b945d5b61c47443899d0e179
- SHA1 77dc9127c8069db64da2a2f6020373a358881ba8
- SHA512 1babeb2859e379618a5e670f0f7dd0dba24c03433ced9924eb8973912764e6fb571059a1e1dcc8fec289e815440a1283e77303e7069b912bd78e1a831ca08b13
- SSDEEP 12288:+Sz7kYWFwdxU4jr3eskLHTwnVGPZ9WUNdcyEJMf5m4ozAUicnYox2I:hom/jWzsGPZIAQyf5m8UicnYI2
- TLSH T141159D19F2A801FDD077D078CA929A07EA72785A07305ADF23E04A5A3F636F45E7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.