General
- Target 2026-08-10_e3d4cc20422fd4f0742ed0598882b0a7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 231KB
- Sample260810-a288pagk2x
- SHA256 3054a5cbeae42744ca3257eb0ba6bdc6abb4e1c20785b364a1f711855192d519
- MD5 e3d4cc20422fd4f0742ed0598882b0a7
- SHA1 9c3cb39d5853eefe21b36d573ee54806ac359b29
- SHA512 766eee6daae6a042dde17b28033c02f02e822f7e564ce37b79edb562cabaa950f395e0e94b700642ba3e16b251423edb0944a4b34e48acd692d0453eb7ecf959
- SSDEEP 6144:vFa+uaBjG94GoRZp7f0pVTU2Es1BKbB3g:vFjxC8X7CYsKVw
- TLSH T136347C16A7990CFDE177C5B889560903EB72BC4A0360EEDF079009A28F176D49E3FB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_e3d4cc20422fd4f0742ed0598882b0a7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_e3d4cc20422fd4f0742ed0598882b0a7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_e3d4cc20422fd4f0742ed0598882b0a7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 231KB
- SHA256 3054a5cbeae42744ca3257eb0ba6bdc6abb4e1c20785b364a1f711855192d519
- MD5 e3d4cc20422fd4f0742ed0598882b0a7
- SHA1 9c3cb39d5853eefe21b36d573ee54806ac359b29
- SHA512 766eee6daae6a042dde17b28033c02f02e822f7e564ce37b79edb562cabaa950f395e0e94b700642ba3e16b251423edb0944a4b34e48acd692d0453eb7ecf959
- SSDEEP 6144:vFa+uaBjG94GoRZp7f0pVTU2Es1BKbB3g:vFjxC8X7CYsKVw
- TLSH T136347C16A7990CFDE177C5B889560903EB72BC4A0360EEDF079009A28F176D49E3FB52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1