Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 02:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_0a38b02f2712c2b61aeb48ae95703b55_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_0a38b02f2712c2b61aeb48ae95703b55_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_0a38b02f2712c2b61aeb48ae95703b55_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 803KB
- Sample260809-cpybrsycqc
- SHA256 a2bf9a7655c57bf204fc40fc76392894c97e71daadbf38536ab23526d8028c2c
- MD5 0a38b02f2712c2b61aeb48ae95703b55
- SHA1 0346ea5b742fcaf76eb0baf0c32861f1c1888261
- SHA512 56e5e094c34edc38f6623481cf9a135397a613a9fa8640784d6b32b11f80999698c05521f5ebf48b1f73bea2e797d206af620eafaa602f2ed3ca4367c5642c60
- SSDEEP 12288:GNGG3U3ITEmUbqLELeBsrUFvWMw1fNHIafyI7jZphE2opIKw6:wAIAmUbqoK711Klo3Gp226IKw6
- TLSH T1A405E115EBA414F9E177813CCD638606EA727C5A4760EBCF13A84AA61F236D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 2 ip-api.com