General
- Target 2026-08-09_b9694571399e1a8e4d6b1e279bdb4414_cobalt-strike_icedid_njrat_satacom_stealc
- Size 898KB
- Sample260809-lwhpbsvfna
- SHA256 d03f53711ad63b9e047e7fdf4701adc0369e15caf0ec9261755929c3b8ebf319
- MD5 b9694571399e1a8e4d6b1e279bdb4414
- SHA1 3226720077efb43811c72bfb3ca5070d10080cbd
- SHA512 c51f7ae7db394eda757e2f741f86d92fb3c85a970ec850c393f1d12b326eff6869fc5b993ff78d016a0865a34bb428bef76173e54b96caf4dca0be8cb8bd7ea2
- SSDEEP 24576:YAIAmUbqoIp24YSVS74mLx+mhUcIfrrEfss:Y5A5uoc2/SVlSx+EUBgfss
- TLSH T1E415F115EBA914F9E273817CCD638602DE727C5903B097CB27A449A62F33AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b9694571399e1a8e4d6b1e279bdb4414_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b9694571399e1a8e4d6b1e279bdb4414_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b9694571399e1a8e4d6b1e279bdb4414_cobalt-strike_icedid_njrat_satacom_stealc
- Size 898KB
- SHA256 d03f53711ad63b9e047e7fdf4701adc0369e15caf0ec9261755929c3b8ebf319
- MD5 b9694571399e1a8e4d6b1e279bdb4414
- SHA1 3226720077efb43811c72bfb3ca5070d10080cbd
- SHA512 c51f7ae7db394eda757e2f741f86d92fb3c85a970ec850c393f1d12b326eff6869fc5b993ff78d016a0865a34bb428bef76173e54b96caf4dca0be8cb8bd7ea2
- SSDEEP 24576:YAIAmUbqoIp24YSVS74mLx+mhUcIfrrEfss:Y5A5uoc2/SVlSx+EUBgfss
- TLSH T1E415F115EBA914F9E273817CCD638602DE727C5903B097CB27A449A62F33AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.