General
- Target 2026-08-09_173c289775cfc6493f1de6a041ff5e7d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 719KB
- Sample260809-nb12aawhje
- SHA256 d57e7e65fada3e7012e57049b82a42dd3ae80922acea02bb355115b2affc8c36
- MD5 173c289775cfc6493f1de6a041ff5e7d
- SHA1 9d7ee64ab5be584bca83e17517c848f3e0a61253
- SHA512 bb6a2d2f19c648dba0fdd4f3cff060c26aa64ef446a318126c7451865f6768ce2d5dca3108a3d8486769e0b5b82be432c680ea8758256d4da1191fa154dd7756
- SSDEEP 12288:/NGG3U3ITEmUbqLELAV/2wE35Oq6j9C3PV65JZoefCURSE5kp:jAIAmUbqo8J2wXj9CU5DjLR9W
- TLSH T108F4E115FBA804F5E273957CCE634505EA727C9A076097CF23948A962F376D08E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_173c289775cfc6493f1de6a041ff5e7d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_173c289775cfc6493f1de6a041ff5e7d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_173c289775cfc6493f1de6a041ff5e7d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 719KB
- SHA256 d57e7e65fada3e7012e57049b82a42dd3ae80922acea02bb355115b2affc8c36
- MD5 173c289775cfc6493f1de6a041ff5e7d
- SHA1 9d7ee64ab5be584bca83e17517c848f3e0a61253
- SHA512 bb6a2d2f19c648dba0fdd4f3cff060c26aa64ef446a318126c7451865f6768ce2d5dca3108a3d8486769e0b5b82be432c680ea8758256d4da1191fa154dd7756
- SSDEEP 12288:/NGG3U3ITEmUbqLELAV/2wE35Oq6j9C3PV65JZoefCURSE5kp:jAIAmUbqo8J2wXj9CU5DjLR9W
- TLSH T108F4E115FBA804F5E273957CCE634505EA727C9A076097CF23948A962F376D08E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.