General
- Target 2026-08-09_a3c68a01aa67ba8bac3b8ecdba890136_cobalt-strike_icedid_njrat_satacom_stealc
- Size 916KB
- Sample260809-ntzk6sek31
- SHA256 f59a1ea423003dbbf744fb8e232c5732467defef36986f61c87fe928c7e9261a
- MD5 a3c68a01aa67ba8bac3b8ecdba890136
- SHA1 1c4ef200a5d83ff152744b1afae97c2bb44b986c
- SHA512 7810860d4f271dad86d1928992cc947cc98766e0bc5bd79e1bd5548d6d76ea93d07cc555a6911356fc6c87325eee7ceed5e0f3af09d7f83fd24114999d0fd4e8
- SSDEEP 24576:vAIAmUbqogcBiZpa9s1mgd+IggDOGAeUQLn8P:v5A5uojkZpa+mgkGljzc
- TLSH T10415F155FAA814F9E2738178CDA34501DA727C9A47B0EBCF13A44A971F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_a3c68a01aa67ba8bac3b8ecdba890136_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a3c68a01aa67ba8bac3b8ecdba890136_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_a3c68a01aa67ba8bac3b8ecdba890136_cobalt-strike_icedid_njrat_satacom_stealc
- Size 916KB
- SHA256 f59a1ea423003dbbf744fb8e232c5732467defef36986f61c87fe928c7e9261a
- MD5 a3c68a01aa67ba8bac3b8ecdba890136
- SHA1 1c4ef200a5d83ff152744b1afae97c2bb44b986c
- SHA512 7810860d4f271dad86d1928992cc947cc98766e0bc5bd79e1bd5548d6d76ea93d07cc555a6911356fc6c87325eee7ceed5e0f3af09d7f83fd24114999d0fd4e8
- SSDEEP 24576:vAIAmUbqogcBiZpa9s1mgd+IggDOGAeUQLn8P:v5A5uojkZpa+mgkGljzc
- TLSH T10415F155FAA814F9E2738178CDA34501DA727C9A47B0EBCF13A44A971F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.