Analysis
- max time kernel
148s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 11:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_35fa1816781c5749bb093ea427a0ba62_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_35fa1816781c5749bb093ea427a0ba62_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_35fa1816781c5749bb093ea427a0ba62_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 602KB
- Sample260809-najqlsab83
- SHA256 14f7396b4f57c49aabc19000b62eec0b9615a4681a14d08ccd3b155c1f71c736
- MD5 35fa1816781c5749bb093ea427a0ba62
- SHA1 c03f8f712cb79ce83a57a8b5eb1ae47fc5432d9f
- SHA512 9e147ee70d42151a364763dcd85b926906fc5ab8c3d4e8545832deb2012af9ee26480abec3191475bc78b12bdc8c30d63eac139e36b50b422ec67189b415b3cd
- SSDEEP 6144:al3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzEFegCM2rza49jzVMTVxgvK1Q1jYkH2:ONGG3U3ITEmUbqLELrX9jhMTEud+ZzzU
- TLSH T1D0D4D065EBA814F9E277813CCDA38606DA727C990770E7CF13948A961F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com