General
- Target 2026-08-09_191ff68250fb5b54a8e1109925fb52cc_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1009KB
- Sample260809-ysvkyax1hy
- SHA256 6be8f80d579d8c15eb6fe825df0661aef47969f4118510963c06e0b1d09da660
- MD5 191ff68250fb5b54a8e1109925fb52cc
- SHA1 b85e8bef4d5aca3959302b59d1a8d57f1280840a
- SHA512 f925f13612d3cf08e4b207f67f15b473864b4c28a3ea9b8f54489e941c7c29dfc08c207a8fab6ca0c1982d1f53437f7970a92386905cab71bca7550e63e0bf24
- SSDEEP 24576:mAIAmUbqodtBiZpaYgvNZhPYJ5cfxd6dcCLBgYB:m5A5uojkZpaYgPhPYJ5qnOcK
- TLSH T17C25F115FAA814F9E273817CCD634606EE727C590770ABCF13A44A962F23AD49E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_191ff68250fb5b54a8e1109925fb52cc_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_191ff68250fb5b54a8e1109925fb52cc_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_191ff68250fb5b54a8e1109925fb52cc_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1009KB
- SHA256 6be8f80d579d8c15eb6fe825df0661aef47969f4118510963c06e0b1d09da660
- MD5 191ff68250fb5b54a8e1109925fb52cc
- SHA1 b85e8bef4d5aca3959302b59d1a8d57f1280840a
- SHA512 f925f13612d3cf08e4b207f67f15b473864b4c28a3ea9b8f54489e941c7c29dfc08c207a8fab6ca0c1982d1f53437f7970a92386905cab71bca7550e63e0bf24
- SSDEEP 24576:mAIAmUbqodtBiZpaYgvNZhPYJ5cfxd6dcCLBgYB:m5A5uojkZpaYgPhPYJ5qnOcK
- TLSH T17C25F115FAA814F9E273817CCD634606EE727C590770ABCF13A44A962F23AD49E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.