General
- Target 2026-08-10_d5f4137f7b9d7d51bdf47c960ed8ebd5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1017KB
- Sample260810-ehqdpavvev
- SHA256 5807442d36297f328237c873bb0e80dac100840172a717287351669ce8145424
- MD5 d5f4137f7b9d7d51bdf47c960ed8ebd5
- SHA1 60ee1e248ce865bce74b286d74289b88bfd0dc6d
- SHA512 4b4dddf06f6a073394a4f89a24eadfa20f3640392d7e2f1ce4de37668712dd7d8d4400086abbf08fcacc81290f4cca2f5310023ebf5b0d79744adc35d5ecfc79
- SSDEEP 24576:2AIAmUbqoLtuI8aHsd8BfCsOVWKX9GH28v9g6:25A5uoxuB78BuWKXJ6
- TLSH T15F25F211FBA814F9E177817CC9634606DB717C5A0771ABDF23948AA62F23AD08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d5f4137f7b9d7d51bdf47c960ed8ebd5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_d5f4137f7b9d7d51bdf47c960ed8ebd5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_d5f4137f7b9d7d51bdf47c960ed8ebd5_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1017KB
- SHA256 5807442d36297f328237c873bb0e80dac100840172a717287351669ce8145424
- MD5 d5f4137f7b9d7d51bdf47c960ed8ebd5
- SHA1 60ee1e248ce865bce74b286d74289b88bfd0dc6d
- SHA512 4b4dddf06f6a073394a4f89a24eadfa20f3640392d7e2f1ce4de37668712dd7d8d4400086abbf08fcacc81290f4cca2f5310023ebf5b0d79744adc35d5ecfc79
- SSDEEP 24576:2AIAmUbqoLtuI8aHsd8BfCsOVWKX9GH28v9g6:25A5uoxuB78BuWKXJ6
- TLSH T15F25F211FBA814F9E177817CC9634606DB717C5A0771ABDF23948AA62F23AD08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.