General
- Target 2026-08-09_6c7d68b610ed628d61ccb4b85f76a882_cobalt-strike_icedid_njrat_satacom_stealc
- Size 721KB
- Sample260809-eqbkhazemf
- SHA256 356a8afb46227f7caf0c4e71cebc9063c0796e3adb989f51443b48541e957b71
- MD5 6c7d68b610ed628d61ccb4b85f76a882
- SHA1 0a1833440a446077f3d2c865e74aeb6c1ac91fa2
- SHA512 fc281b176729c3da4f4c3b75cda3cded776d5151a7d0bca60210fc1bdf481ad1a32a583fc83455373284ce14a01769362c8f22b959ea547ae4eda6545b675bc2
- SSDEEP 12288:kNGG3U3ITEmUbqLELATghDi237Jp4RFAfVX2i03otvJXjlZ41a:iAIAmUbqo8Tr2Fp4RFYVX2i03oXjlZ4I
- TLSH T193F4E115FBA414F9E273D17CCE634602DAB27C5A476097CF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6c7d68b610ed628d61ccb4b85f76a882_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6c7d68b610ed628d61ccb4b85f76a882_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6c7d68b610ed628d61ccb4b85f76a882_cobalt-strike_icedid_njrat_satacom_stealc
- Size 721KB
- SHA256 356a8afb46227f7caf0c4e71cebc9063c0796e3adb989f51443b48541e957b71
- MD5 6c7d68b610ed628d61ccb4b85f76a882
- SHA1 0a1833440a446077f3d2c865e74aeb6c1ac91fa2
- SHA512 fc281b176729c3da4f4c3b75cda3cded776d5151a7d0bca60210fc1bdf481ad1a32a583fc83455373284ce14a01769362c8f22b959ea547ae4eda6545b675bc2
- SSDEEP 12288:kNGG3U3ITEmUbqLELATghDi237Jp4RFAfVX2i03otvJXjlZ41a:iAIAmUbqo8Tr2Fp4RFYVX2i03oXjlZ4I
- TLSH T193F4E115FBA414F9E273D17CCE634602DAB27C5A476097CF13A48A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.