General
- Target 2026-08-07_2fcb9f5954549f955d58151909672f28_cobalt-strike_icedid_njrat_satacom_stealc
- Size 789KB
- Sample260807-hs1tyszang
- SHA256 b373d51ee4ea8d9a8ac43c364ecbb5b566b33fcd0ea814c9442e9dc9ccb21722
- MD5 2fcb9f5954549f955d58151909672f28
- SHA1 409e8ad60e3a2186799f8a7a7498b9991e43d3e3
- SHA512 a5197d1474cf5307d287b8ad4c59bad69248efac7deb8aa4fd7ced00c8c904a63dff7da599fbc74580389dbda5fd46b02a3f612024c9a9e80f51435eb17591d3
- SSDEEP 12288:SNGG3U3ITEmUbqLEL8ksrLFIvwHz/WInRKD9JuiKLSkv:sAIAmUbqoIjHr1nC9JuiKLS6
- TLSH T13A05E155FBA810F9E2778138CD634A02EB727C9A4770E7CB13A449962F239D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2fcb9f5954549f955d58151909672f28_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_2fcb9f5954549f955d58151909672f28_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2fcb9f5954549f955d58151909672f28_cobalt-strike_icedid_njrat_satacom_stealc
- Size 789KB
- SHA256 b373d51ee4ea8d9a8ac43c364ecbb5b566b33fcd0ea814c9442e9dc9ccb21722
- MD5 2fcb9f5954549f955d58151909672f28
- SHA1 409e8ad60e3a2186799f8a7a7498b9991e43d3e3
- SHA512 a5197d1474cf5307d287b8ad4c59bad69248efac7deb8aa4fd7ced00c8c904a63dff7da599fbc74580389dbda5fd46b02a3f612024c9a9e80f51435eb17591d3
- SSDEEP 12288:SNGG3U3ITEmUbqLEL8ksrLFIvwHz/WInRKD9JuiKLSkv:sAIAmUbqoIjHr1nC9JuiKLS6
- TLSH T13A05E155FBA810F9E2778138CD634A02EB727C9A4770E7CB13A449962F239D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.