Analysis
- max time kernel
150s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 09:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d448491be7f697882a52586d12ae6c6d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d448491be7f697882a52586d12ae6c6d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_d448491be7f697882a52586d12ae6c6d_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 648KB
- Sample260809-kzk37athrb
- SHA256 0a7c4ce964106bcbef8b7d5ac78216f9f4d943d803dde7d05464c3819abd4388
- MD5 d448491be7f697882a52586d12ae6c6d
- SHA1 a5038f1f1923b433be21ce3391cb31d1db2edb74
- SHA512 c268d1eb09261c06a4d33c1177bec7f01f39e56cfc37ed24eebd97b8d5f135df3642dd3056a0d37b68758a7554fff55ce728f953712946812551c1083181d687
- SSDEEP 12288:1NGG3U3ITEmUbqLELqMQrBhYIwCtCYu1y+nU5zX4+/0zIAiAQ1fZk:lAIAmUbqomhhrwCABdU5czIIQhZk
- TLSH T1F5E4D055FBA814F9E2B3C178CD634605EA727C9A0770A7CF239449962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com