General
- Target 2026-08-09_027c0e536e3cceb52b2361d4c82a4bcc_cobalt-strike_icedid_njrat_satacom_stealc
- Size 855KB
- Sample260809-nwd29azya1
- SHA256 d318498e5297c19e47c47c919e5c9fcb89b21dadd89753297bed4ced36e24c58
- MD5 027c0e536e3cceb52b2361d4c82a4bcc
- SHA1 1dc1e260aff13265f0b76fc3b3914e167c03b299
- SHA512 dc42bd317b6a9a4ddf3f097f8264829c4e142a8ebcb304925fab2e822b041af26d083b3f4a1ed5496e9a5470b18b056184f62d4663ce330d478c69ff65a1541d
- SSDEEP 24576:qAIAmUbqo19uI8aIDJOAzFGVcVzrM4gtqjJ:q5A5uofuBlgAzgVcxY4QqF
- TLSH T1C315E115FBB804F9E177817CCE634506EA727CA90770A7DB13948A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_027c0e536e3cceb52b2361d4c82a4bcc_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_027c0e536e3cceb52b2361d4c82a4bcc_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_027c0e536e3cceb52b2361d4c82a4bcc_cobalt-strike_icedid_njrat_satacom_stealc
- Size 855KB
- SHA256 d318498e5297c19e47c47c919e5c9fcb89b21dadd89753297bed4ced36e24c58
- MD5 027c0e536e3cceb52b2361d4c82a4bcc
- SHA1 1dc1e260aff13265f0b76fc3b3914e167c03b299
- SHA512 dc42bd317b6a9a4ddf3f097f8264829c4e142a8ebcb304925fab2e822b041af26d083b3f4a1ed5496e9a5470b18b056184f62d4663ce330d478c69ff65a1541d
- SSDEEP 24576:qAIAmUbqo19uI8aIDJOAzFGVcVzrM4gtqjJ:q5A5uofuBlgAzgVcxY4QqF
- TLSH T1C315E115FBB804F9E177817CCE634506EA727CA90770A7DB13948A962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.