General
- Target 2026-08-03_a7cfa8f8cc5c6861c142c2c1814fce24_cobalt-strike_icedid_njrat_satacom_stealc
- Size 158KB
- Sample260804-md97asxfnh
- SHA256 f4bcd9d794f936fd2b58d42edc8af3db47be33cb166cefc4a0bf60a96b94edba
- MD5 a7cfa8f8cc5c6861c142c2c1814fce24
- SHA1 2b57f9a96dc167b9fe8023239b94e50b3ceaa66b
- SHA512 bc8eae17cbd9135fac401f502c8ddc2a03b9e338acc70b0c8550a9a2125de8e0719143fa5e8052ba0b6fba9e7b48a9c16eb68333fa3e0dc6ef617cf61d775eb9
- SSDEEP 3072:tlyZ/jeVCWJG+O1c9fplkDK7Az+q0NsnBkVz3xb:tly6XJOK9omczUD
- TLSH T1D9F37D17B6A630FAE167D538C9520905EF72BC775BA0AADF43540EB60E236D08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a7cfa8f8cc5c6861c142c2c1814fce24_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a7cfa8f8cc5c6861c142c2c1814fce24_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a7cfa8f8cc5c6861c142c2c1814fce24_cobalt-strike_icedid_njrat_satacom_stealc
- Size 158KB
- SHA256 f4bcd9d794f936fd2b58d42edc8af3db47be33cb166cefc4a0bf60a96b94edba
- MD5 a7cfa8f8cc5c6861c142c2c1814fce24
- SHA1 2b57f9a96dc167b9fe8023239b94e50b3ceaa66b
- SHA512 bc8eae17cbd9135fac401f502c8ddc2a03b9e338acc70b0c8550a9a2125de8e0719143fa5e8052ba0b6fba9e7b48a9c16eb68333fa3e0dc6ef617cf61d775eb9
- SSDEEP 3072:tlyZ/jeVCWJG+O1c9fplkDK7Az+q0NsnBkVz3xb:tly6XJOK9omczUD
- TLSH T1D9F37D17B6A630FAE167D538C9520905EF72BC775BA0AADF43540EB60E236D08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.