General
- Target 2026-08-06_c48bf1dec61ddc3acab2dc6cee0e9272_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260806-blb4pav1cx
- SHA256 be1bb1286b2a54cbe9e2f9f75f3da0772952ff002607bfd19ea9b214cc3e5c97
- MD5 c48bf1dec61ddc3acab2dc6cee0e9272
- SHA1 2a485d4388b4e19abe9270079c1ffc5b242efa93
- SHA512 d572fa2ea539f8cc7f905f94536cfbadeca2e3f1692412cdbdaa6a713817c31abf54f9aa2d8fd4a5f1bbe40c0daec05569ea802649a4f6f33a6bab482df65453
- SSDEEP 24576:orTrGZSafJogtvH6n2Q3fcoZ3C0/HDeZjis2kYKi95yZFyYvT1NaKr4TA:6TrGZSioAvan2Q3fcUd/jSinKdZYs1
- TLSH T111759E0AA2B900EDD167C17DCA165607EBB2B44513309BDF57D0CAA62F23EE15A7F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_c48bf1dec61ddc3acab2dc6cee0e9272_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_c48bf1dec61ddc3acab2dc6cee0e9272_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 be1bb1286b2a54cbe9e2f9f75f3da0772952ff002607bfd19ea9b214cc3e5c97
- MD5 c48bf1dec61ddc3acab2dc6cee0e9272
- SHA1 2a485d4388b4e19abe9270079c1ffc5b242efa93
- SHA512 d572fa2ea539f8cc7f905f94536cfbadeca2e3f1692412cdbdaa6a713817c31abf54f9aa2d8fd4a5f1bbe40c0daec05569ea802649a4f6f33a6bab482df65453
- SSDEEP 24576:orTrGZSafJogtvH6n2Q3fcoZ3C0/HDeZjis2kYKi95yZFyYvT1NaKr4TA:6TrGZSioAvan2Q3fcUd/jSinKdZYs1
- TLSH T111759E0AA2B900EDD167C17DCA165607EBB2B44513309BDF57D0CAA62F23EE15A7F720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.