General
- Target 2026-08-09_6c057e2ea2bb80d60413d62c66471ea5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 674KB
- Sample260809-k4t7nacl91
- SHA256 359d50071e4534050c7ed65fa610ccde7bc2948c92f6124cc36437fcf8eb0cbf
- MD5 6c057e2ea2bb80d60413d62c66471ea5
- SHA1 2221003c2b0a2636e3c489e8dda48fc1126f5b10
- SHA512 59a8d866dd97e42877a68a1e7b7bad9fdff8c61a352128d78b1c93ff328b85d0235ac9b6e12877e778d7bd73db8434b84c85b67420078aff94d9dd3aec17d1c7
- SSDEEP 12288:BNGG3U3ITEmUbqLELjb9jhzY6X8Kz2Y/R5kWrWQbetr6AG:BAIAmUbqonbbfISxbet+J
- TLSH T1C0E4E054E7A914F9E177C13CCD638606EA727C9A0760E7CF23948A962F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6c057e2ea2bb80d60413d62c66471ea5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6c057e2ea2bb80d60413d62c66471ea5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6c057e2ea2bb80d60413d62c66471ea5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 674KB
- SHA256 359d50071e4534050c7ed65fa610ccde7bc2948c92f6124cc36437fcf8eb0cbf
- MD5 6c057e2ea2bb80d60413d62c66471ea5
- SHA1 2221003c2b0a2636e3c489e8dda48fc1126f5b10
- SHA512 59a8d866dd97e42877a68a1e7b7bad9fdff8c61a352128d78b1c93ff328b85d0235ac9b6e12877e778d7bd73db8434b84c85b67420078aff94d9dd3aec17d1c7
- SSDEEP 12288:BNGG3U3ITEmUbqLELjb9jhzY6X8Kz2Y/R5kWrWQbetr6AG:BAIAmUbqonbbfISxbet+J
- TLSH T1C0E4E054E7A914F9E177C13CCD638606EA727C9A0760E7CF23948A962F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.