General
- Target 2026-08-09_d63413c9c8bc22d305fd5f3cead880ac_cobalt-strike_icedid_njrat_satacom_stealc
- Size 857KB
- Sample260809-elwd4shj5v
- SHA256 f150b473483d416260edd7089217770f33320d9c2ef31e81d65b7ba92c7f06bb
- MD5 d63413c9c8bc22d305fd5f3cead880ac
- SHA1 07d53b72fc0e16ba75a39670ceedb08babac7c1c
- SHA512 3b1c62c22ab79fa44495b01ba8878519d0b3da255c1a841d48f84eee80f152bb48e2bb258bb98cb0922fd124711ceea3f38cab2606031febf76d17f4effab87a
- SSDEEP 24576:sAIAmUbqoe7RMLDNsCassIVxAN0iTNcVI1UFGyLxim2:s5A5uoAqLDassgbiTeVwUFGKF2
- TLSH T15D15F125F7A814F9E273817CCD634606EB727C660760D7DB139446A62F23AD09E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d63413c9c8bc22d305fd5f3cead880ac_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d63413c9c8bc22d305fd5f3cead880ac_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d63413c9c8bc22d305fd5f3cead880ac_cobalt-strike_icedid_njrat_satacom_stealc
- Size 857KB
- SHA256 f150b473483d416260edd7089217770f33320d9c2ef31e81d65b7ba92c7f06bb
- MD5 d63413c9c8bc22d305fd5f3cead880ac
- SHA1 07d53b72fc0e16ba75a39670ceedb08babac7c1c
- SHA512 3b1c62c22ab79fa44495b01ba8878519d0b3da255c1a841d48f84eee80f152bb48e2bb258bb98cb0922fd124711ceea3f38cab2606031febf76d17f4effab87a
- SSDEEP 24576:sAIAmUbqoe7RMLDNsCassIVxAN0iTNcVI1UFGyLxim2:s5A5uoAqLDassgbiTeVwUFGKF2
- TLSH T15D15F125F7A814F9E273817CCD634606EB727C660760D7DB139446A62F23AD09E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.