General
- Target 2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom
- Size 361KB
- Sample260802-ngrd2a1hmd
- SHA256 a8acc316637fc8957d5245ad23c260c8d519aa789748b7a45990189a8f9319b5
- MD5 7c6b83b67fb837e1fbe5c071b86196de
- SHA1 e972be51cbf3d913dc01bfa977eb8d69ca60dcba
- SHA512 91003413ef0becee78cb6eb17970dc7878e4a13292b77864116b6e65538226f2d5fe36a743c55224be01f46f40179cf76e849f60f6669c0ae1154ac432b0d102
- SSDEEP 6144:C6HcTTbL7j8zR3QHkL0faGF5MVJKBIm1WCehaMN/rpJEb8pQ5CZT2P8:C5mUOKWCkv/DE4uCZTy
- TLSH T17C748D15E7A404FDE1B7D178CA660906DB72BC4A0370ABDF03945AA71F276E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom
- Size 361KB
- SHA256 a8acc316637fc8957d5245ad23c260c8d519aa789748b7a45990189a8f9319b5
- MD5 7c6b83b67fb837e1fbe5c071b86196de
- SHA1 e972be51cbf3d913dc01bfa977eb8d69ca60dcba
- SHA512 91003413ef0becee78cb6eb17970dc7878e4a13292b77864116b6e65538226f2d5fe36a743c55224be01f46f40179cf76e849f60f6669c0ae1154ac432b0d102
- SSDEEP 6144:C6HcTTbL7j8zR3QHkL0faGF5MVJKBIm1WCehaMN/rpJEb8pQ5CZT2P8:C5mUOKWCkv/DE4uCZTy
- TLSH T17C748D15E7A404FDE1B7D178CA660906DB72BC4A0370ABDF03945AA71F276E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1