Analysis
- max time kernel
148s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 02:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_29e72c3e70fe64565c37b0e08a0d1ee6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_29e72c3e70fe64565c37b0e08a0d1ee6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_29e72c3e70fe64565c37b0e08a0d1ee6_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 660KB
- Sample260809-cnpy1astet
- SHA256 196f3cb14f1e89fb80e0325174d820cc2719396786db35466220524040545761
- MD5 29e72c3e70fe64565c37b0e08a0d1ee6
- SHA1 03307c32ac7f8a22ef9f67c6e44d247fae964cb5
- SHA512 789b8605c3445879a8ab185a50274f4104b471615abb5cc8f02469431ce8351eb9605dbb932ef88ad7993ca497b208b8d9c8d5f2354de461bf269a2d19c7f67d
- SSDEEP 12288:PNGG3U3ITEmUbqLELfq/2wE35Oq6j92VmT7yvl5IB0M/CqcWt:zAIAmUbqoLi2wXj9hT7m00M/CBWt
- TLSH T16FE4E115FBE814F9E273857CCE634602EA727C5A076097CB13948A961F37AD18E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com