General
- Target 2026-08-09_d4ef7e71be378b00efec5dd4ecce718d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 620KB
- Sample260809-ntbjcazyax
- SHA256 ed80a37cd45929c049dc13a59686b278d63122f51621a21a54588dad26d944f5
- MD5 d4ef7e71be378b00efec5dd4ecce718d
- SHA1 1ee02471d0b484551a30934749696cf445524ce1
- SHA512 a222dcf38ba9e6977e87d99b9132e23af25f0ecdb97c244ad92dac2a9da6e81da8cdbb3188b68332df9f027f2fc0c69f463606f63903be79e82aae0d19fe7b25
- SSDEEP 12288:2NGG3U3ITEmUbqLELOgQrBhYHxbi+t8opZPOyDwl:gAIAmUbqo6FhqbvHPOyg
- TLSH T11AD4D015FBA814F9E273C17CCD674505EA727C9A0760A7CF23A48A962F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d4ef7e71be378b00efec5dd4ecce718d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d4ef7e71be378b00efec5dd4ecce718d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d4ef7e71be378b00efec5dd4ecce718d_cobalt-strike_icedid_njrat_satacom_stealc
- Size 620KB
- SHA256 ed80a37cd45929c049dc13a59686b278d63122f51621a21a54588dad26d944f5
- MD5 d4ef7e71be378b00efec5dd4ecce718d
- SHA1 1ee02471d0b484551a30934749696cf445524ce1
- SHA512 a222dcf38ba9e6977e87d99b9132e23af25f0ecdb97c244ad92dac2a9da6e81da8cdbb3188b68332df9f027f2fc0c69f463606f63903be79e82aae0d19fe7b25
- SSDEEP 12288:2NGG3U3ITEmUbqLELOgQrBhYHxbi+t8opZPOyDwl:gAIAmUbqo6FhqbvHPOyg
- TLSH T11AD4D015FBA814F9E273C17CCD674505EA727C9A0760A7CF23A48A962F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.