General
- Target 2026-08-10_5ad1fef1dfb59db242476713f6cbc033_cobalt-strike_icedid_njrat_satacom_stealc
- Size 807KB
- Sample260810-3w411a1fra
- SHA256 9bc416a9c16df6315cdd6256606f456a2a376c17087f11ba8dae560e249d3c89
- MD5 5ad1fef1dfb59db242476713f6cbc033
- SHA1 531f09ddadd576e01c7c2e524f8eb98e1c75d2b7
- SHA512 387288bb3cd4393754fa8ae82b25853bb46b82097a0c35c8c0474e42074d8224b57e6f3407bfd45b04cabcba3ec867d4e4f8efd399a0f4427f93d45792527591
- SSDEEP 24576:2AIAmUbqoXbgbF3RZ9pEhoUJnXLNA3t+SHyrI:25A5uo4FwoUJXLud+Sp
- TLSH T1DA05F115EBA514F9E1B3C17CCE634506EA727C560760DBCF23A44AA62F23AD18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5ad1fef1dfb59db242476713f6cbc033_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_5ad1fef1dfb59db242476713f6cbc033_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5ad1fef1dfb59db242476713f6cbc033_cobalt-strike_icedid_njrat_satacom_stealc
- Size 807KB
- SHA256 9bc416a9c16df6315cdd6256606f456a2a376c17087f11ba8dae560e249d3c89
- MD5 5ad1fef1dfb59db242476713f6cbc033
- SHA1 531f09ddadd576e01c7c2e524f8eb98e1c75d2b7
- SHA512 387288bb3cd4393754fa8ae82b25853bb46b82097a0c35c8c0474e42074d8224b57e6f3407bfd45b04cabcba3ec867d4e4f8efd399a0f4427f93d45792527591
- SSDEEP 24576:2AIAmUbqoXbgbF3RZ9pEhoUJnXLNA3t+SHyrI:25A5uo4FwoUJXLud+Sp
- TLSH T1DA05F115EBA514F9E1B3C17CCE634506EA727C560760DBCF23A44AA62F23AD18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.