General
- Target 2026-08-10_c6f347ffa6ccd62a46ce358fb5fb7b88_cobalt-strike_icedid_njrat_satacom_stealc
- Size 590KB
- Sample260810-3htcca1drb
- SHA256 e563b48288cd87b30b49a93d78169afef1e4727d3d83151105edd5fbddc246f2
- MD5 c6f347ffa6ccd62a46ce358fb5fb7b88
- SHA1 4a9c9eed75a5480f68a6b88f0d366f8f0ea8e49c
- SHA512 24128d8c2fa06e97e519eb9f231180733e98c39602aa1e362e21112882c0a58fa745f314ceb180a0be2f739fda27c5e079a8cd7432708c6cec6aea796b6ef34c
- SSDEEP 12288:rNGG3U3ITEmUbqLEL9v/2wE35Oq6j9C3PV65JZoef5:PAIAmUbqoJH2wXj9CU5DjR
- TLSH T13BD4D015FBA814F9E273957CCD634501EA727C9A076097CF13948AA62F376D08E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_c6f347ffa6ccd62a46ce358fb5fb7b88_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_c6f347ffa6ccd62a46ce358fb5fb7b88_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_c6f347ffa6ccd62a46ce358fb5fb7b88_cobalt-strike_icedid_njrat_satacom_stealc
- Size 590KB
- SHA256 e563b48288cd87b30b49a93d78169afef1e4727d3d83151105edd5fbddc246f2
- MD5 c6f347ffa6ccd62a46ce358fb5fb7b88
- SHA1 4a9c9eed75a5480f68a6b88f0d366f8f0ea8e49c
- SHA512 24128d8c2fa06e97e519eb9f231180733e98c39602aa1e362e21112882c0a58fa745f314ceb180a0be2f739fda27c5e079a8cd7432708c6cec6aea796b6ef34c
- SSDEEP 12288:rNGG3U3ITEmUbqLEL9v/2wE35Oq6j9C3PV65JZoef5:PAIAmUbqoJH2wXj9CU5DjR
- TLSH T13BD4D015FBA814F9E273957CCD634501EA727C9A076097CF13948AA62F376D08E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.