General
- Target 2026-08-09_8ac5a8afc53813ee42120a363b2721c0_cobalt-strike_icedid_satacom_stealc
- Size 138KB
- Sample260809-l2gzzsdk7w
- SHA256 9af9444ce94820f5e8309cd5f9a4c463e8c4b7ee6d975aa15ead7206216404a1
- MD5 8ac5a8afc53813ee42120a363b2721c0
- SHA1 aa99e9156e59dfb285963f796c4a5042d6600005
- SHA512 c6b11de34cde38285bf5cb551e13daad7e7a3d5ce6b7db420d34951926bb8e8bb690d5feaa67b1b871190427eb38d3ba56a25e96ce4cef78f140edb27b9d76f0
- SSDEEP 3072:OcPclum28otzcyf/qvsEMa8255lMAsEmxW5rN7XMf:LJfCyfKMan55aCP5TMf
- TLSH T159D33B1BB6B670FAD2BAC935C5411905FB727CB297A0ABEF47500E960F226D09E3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8ac5a8afc53813ee42120a363b2721c0_cobalt-strike_icedid_satacom_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8ac5a8afc53813ee42120a363b2721c0_cobalt-strike_icedid_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_8ac5a8afc53813ee42120a363b2721c0_cobalt-strike_icedid_satacom_stealc
- Size 138KB
- SHA256 9af9444ce94820f5e8309cd5f9a4c463e8c4b7ee6d975aa15ead7206216404a1
- MD5 8ac5a8afc53813ee42120a363b2721c0
- SHA1 aa99e9156e59dfb285963f796c4a5042d6600005
- SHA512 c6b11de34cde38285bf5cb551e13daad7e7a3d5ce6b7db420d34951926bb8e8bb690d5feaa67b1b871190427eb38d3ba56a25e96ce4cef78f140edb27b9d76f0
- SSDEEP 3072:OcPclum28otzcyf/qvsEMa8255lMAsEmxW5rN7XMf:LJfCyfKMan55aCP5TMf
- TLSH T159D33B1BB6B670FAD2BAC935C5411905FB727CB297A0ABEF47500E960F226D09E3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.