General
- Target 2026-08-10_f237341a5f2e6d4686f1b69a275c1f12_cobalt-strike_icedid_njrat_satacom_stealc
- Size 970KB
- Sample260810-ea5teaam8s
- SHA256 3084b6b468efda9d461cbcc6ebd768913aceec50fe126179acb2c7131ddb5afa
- MD5 f237341a5f2e6d4686f1b69a275c1f12
- SHA1 60176617d6084460b74deeaa04dc7e345a2e6362
- SHA512 bee410792551248f961ac8a0d8f85de3741dcd6fe29c8eeb44fd77db2ee4ef4352a5a124ef961a5595ff7c69a6393ab9d38b6b5c65c5b6ad1b4ceb87c848fbb9
- SSDEEP 12288:uNGG3U3ITEmUbqLELLUsrLFQrP2VGPJ/JgTOjeZM8xd1bIJegs+bJsHBALqD8:oAIAmUbqoPoreoPJ/E7k7srB4
- TLSH T17E25F115FBA810F9E1779138CE634606EA727C5A0770E7CF23A44A962F23AD19D3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_f237341a5f2e6d4686f1b69a275c1f12_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_f237341a5f2e6d4686f1b69a275c1f12_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_f237341a5f2e6d4686f1b69a275c1f12_cobalt-strike_icedid_njrat_satacom_stealc
- Size 970KB
- SHA256 3084b6b468efda9d461cbcc6ebd768913aceec50fe126179acb2c7131ddb5afa
- MD5 f237341a5f2e6d4686f1b69a275c1f12
- SHA1 60176617d6084460b74deeaa04dc7e345a2e6362
- SHA512 bee410792551248f961ac8a0d8f85de3741dcd6fe29c8eeb44fd77db2ee4ef4352a5a124ef961a5595ff7c69a6393ab9d38b6b5c65c5b6ad1b4ceb87c848fbb9
- SSDEEP 12288:uNGG3U3ITEmUbqLELLUsrLFQrP2VGPJ/JgTOjeZM8xd1bIJegs+bJsHBALqD8:oAIAmUbqoPoreoPJ/E7k7srB4
- TLSH T17E25F115FBA810F9E1779138CE634606EA727C5A0770E7CF23A44A962F23AD19D3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.