General
- Target 2026-08-04_148a506d9bbfffc93a3465239760d20c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 753KB
- Sample260804-j64cnsfh87
- SHA256 6f84ea84e26419dd54cc16426316203388602d95510153c3856db4be57a62087
- MD5 148a506d9bbfffc93a3465239760d20c
- SHA1 187b67856d77465749c7c6f698e416a97dabab83
- SHA512 5f2df29389381e1adaff1a3bc6de6fd6794d940d2682ea3146420a85f5abd077c1f5c29444887abcd8e073d213f918595aeb5ca7f27bdea94a106675593628e1
- SSDEEP 12288:PNGG3U3ITEmUbqLELY39Bpr5t6Wu6FLpoEzWU2+71BtcBzMycGNvvhEMpIa:zAIAmUbqoU3vft5FCdk3A4ycGNvvhEq
- TLSH T150F4E115F6A814F9E277D17CCD238601EB727C99076097CF23A889962F27AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_148a506d9bbfffc93a3465239760d20c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_148a506d9bbfffc93a3465239760d20c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_148a506d9bbfffc93a3465239760d20c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 753KB
- SHA256 6f84ea84e26419dd54cc16426316203388602d95510153c3856db4be57a62087
- MD5 148a506d9bbfffc93a3465239760d20c
- SHA1 187b67856d77465749c7c6f698e416a97dabab83
- SHA512 5f2df29389381e1adaff1a3bc6de6fd6794d940d2682ea3146420a85f5abd077c1f5c29444887abcd8e073d213f918595aeb5ca7f27bdea94a106675593628e1
- SSDEEP 12288:PNGG3U3ITEmUbqLELY39Bpr5t6Wu6FLpoEzWU2+71BtcBzMycGNvvhEMpIa:zAIAmUbqoU3vft5FCdk3A4ycGNvvhEq
- TLSH T150F4E115F6A814F9E277D17CCD238601EB727C99076097CF23A889962F27AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.