General
- Target 2026-08-02_005b0553398004545e5f7a7865b2329c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1005KB
- Sample260802-ylj6mawzb1
- SHA256 67af03554a59d5a80061133aacf4c96df818651d027b62b2a7e6c217d56270bb
- MD5 005b0553398004545e5f7a7865b2329c
- SHA1 220590c25d24b516292c2aa2ab485ca2260d9a52
- SHA512 ca4400d9d5c2a3236dbf5ea3c69c5b7c5bffb60bee50ae6d86658895d8cbbc60cefb5f6a31f4befdebb03e1e061e73211c3187af20cfff920f94f697ef8b9ce8
- SSDEEP 24576:zAIAmUbqoLJRMLDNoWPYBD3bY+9EKyl/baPyH3oFr08T2bgMU:z5A5uoFqLD3PYBDLJ9cGPyH3zrVU
- TLSH T1CB250225F6A810F9E273C17CCE274506EA72BC5A07A197CB13A44A971F236D19E3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_005b0553398004545e5f7a7865b2329c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_005b0553398004545e5f7a7865b2329c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_005b0553398004545e5f7a7865b2329c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1005KB
- SHA256 67af03554a59d5a80061133aacf4c96df818651d027b62b2a7e6c217d56270bb
- MD5 005b0553398004545e5f7a7865b2329c
- SHA1 220590c25d24b516292c2aa2ab485ca2260d9a52
- SHA512 ca4400d9d5c2a3236dbf5ea3c69c5b7c5bffb60bee50ae6d86658895d8cbbc60cefb5f6a31f4befdebb03e1e061e73211c3187af20cfff920f94f697ef8b9ce8
- SSDEEP 24576:zAIAmUbqoLJRMLDNoWPYBD3bY+9EKyl/baPyH3oFr08T2bgMU:z5A5uoFqLD3PYBDLJ9cGPyH3zrVU
- TLSH T1CB250225F6A810F9E273C17CCE274506EA72BC5A07A197CB13A44A971F236D19E3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.