General
- Target 2026-08-06_bfbcc04a0402edc66eff267e9d0a8389_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260806-bl2dksfa85
- SHA256 4edf5c4912fe87f612b942edef6fcb3c11cdcef9299da2892c65c4b73ca608f9
- MD5 bfbcc04a0402edc66eff267e9d0a8389
- SHA1 2a52d344318550e2dbc4bcf09a0772e3c0ed04c6
- SHA512 d9907acef04410602d59f7acc48a536bf66e2ba0919c3eff41c3a3007f84ecdbe1617edfff63faf68897e16df10a0c2334075cef9f80476eef2046f1850b503f
- SSDEEP 24576:t94eJPQW4GLiEYUZs/X38zYO0UQzSoH3CiiWJWABhJlklPw7ZqhGM:0eJPNidUS/X38zaX2wyiXWfa
- TLSH T15C858E0AA2B900ECD1A7C17DCA165607EBB1B44513309ADF57D0CAA66F23EE15E7F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_bfbcc04a0402edc66eff267e9d0a8389_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_bfbcc04a0402edc66eff267e9d0a8389_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 4edf5c4912fe87f612b942edef6fcb3c11cdcef9299da2892c65c4b73ca608f9
- MD5 bfbcc04a0402edc66eff267e9d0a8389
- SHA1 2a52d344318550e2dbc4bcf09a0772e3c0ed04c6
- SHA512 d9907acef04410602d59f7acc48a536bf66e2ba0919c3eff41c3a3007f84ecdbe1617edfff63faf68897e16df10a0c2334075cef9f80476eef2046f1850b503f
- SSDEEP 24576:t94eJPQW4GLiEYUZs/X38zYO0UQzSoH3CiiWJWABhJlklPw7ZqhGM:0eJPNidUS/X38zaX2wyiXWfa
- TLSH T15C858E0AA2B900ECD1A7C17DCA165607EBB1B44513309ADF57D0CAA66F23EE15E7F720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.