Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 04:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_619e54a1cb9ed8813fd4375a86f17ece_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_619e54a1cb9ed8813fd4375a86f17ece_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_619e54a1cb9ed8813fd4375a86f17ece_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 830KB
- Sample260809-eqrlqahk21
- SHA256 1336fa3e126c13bd5e5659945f11db88e2980d0e58f4471f059be69563502720
- MD5 619e54a1cb9ed8813fd4375a86f17ece
- SHA1 084e4a3274e51e61078e6e68d06fed25cea36781
- SHA512 31e46c27760d440ca2ec50853bbc33f9900f82107507e76ff3e584fc4f93d41d6304fa27bae26782c87c28ea27e345d936591dad669036ba893b85bc38f1ebd1
- SSDEEP 12288:LNGG3U3ITEmUbqLEL0PI8oFr6kH/kQaztw6IS8vLwgmeBLmQSTe+ECk:vAIAmUbqooPI8ojH8Lz58TwgmKL1hRp
- TLSH T16A05F115EAA804F9E173C17CCD634606DA72BC9A0760D7CF23A44A962F33AD59E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com