General
- Target 2026-08-09_57c9fa552236ddef65d79fa79b8ffc0b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 894KB
- Sample260809-eq3c8ahk3w
- SHA256 2f680416810463d97cbe6bd9eea25c6a7de83bed2efd3068f77ac6dbb353515c
- MD5 57c9fa552236ddef65d79fa79b8ffc0b
- SHA1 0ac6a46002d6cc1789903041c42498c712091f3d
- SHA512 de5a91e35b870131fe8619e76507061d82b92f8a0a7e4d81d3dc747d181a55110ba7cf6f99d22e20ad7850c93d0148ac55271c5cdd7014778fe0d36424d45eb4
- SSDEEP 24576:5AIAmUbqootjvY+BtK50XkbCwoKJY56G1izCmF2:55A5uooUKcikGwoKJ3zCmY
- TLSH T1D815F155FBA810F9E273D178CD634605EA727C5A47B0E6CF23A44A962F236D08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_57c9fa552236ddef65d79fa79b8ffc0b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_57c9fa552236ddef65d79fa79b8ffc0b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_57c9fa552236ddef65d79fa79b8ffc0b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 894KB
- SHA256 2f680416810463d97cbe6bd9eea25c6a7de83bed2efd3068f77ac6dbb353515c
- MD5 57c9fa552236ddef65d79fa79b8ffc0b
- SHA1 0ac6a46002d6cc1789903041c42498c712091f3d
- SHA512 de5a91e35b870131fe8619e76507061d82b92f8a0a7e4d81d3dc747d181a55110ba7cf6f99d22e20ad7850c93d0148ac55271c5cdd7014778fe0d36424d45eb4
- SSDEEP 24576:5AIAmUbqootjvY+BtK50XkbCwoKJY56G1izCmF2:55A5uooUKcikGwoKJ3zCmY
- TLSH T1D815F155FBA810F9E273D178CD634605EA727C5A47B0E6CF23A44A962F236D08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.