General
- Target 2026-08-10_af66a7d0d4e24f9cfba2c2531638371f_cobalt-strike_icedid_njrat_satacom_stealc
- Size 748KB
- Sample260810-sevqws1fmd
- SHA256 ed6702a7599556ee1a7cb27e9a673da49e23d9b535db70cb339ca333d9b74ed9
- MD5 af66a7d0d4e24f9cfba2c2531638371f
- SHA1 192a844457929111bc717c2f02577da7d695193c
- SHA512 03f34a8d6095e69685ca6a414c05321d52c248f5e8b3533f529763af07cc3a7b89fb2136ee4b41f53dedc32f0b635c69623c96f10e9acb699693f0a742e6f64c
- SSDEEP 12288:5NGG3U3ITEmUbqLELjQuIcLC7vWfnfgc6JBymiw2NyVyACTp+RW0u2sO:pAIAmUbqofQuI8aIsimiwhVyAYpoRsO
- TLSH T11CF4E155FBA414F9E177813CCD634606EA727C9A0770ABCF13A48A962F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_af66a7d0d4e24f9cfba2c2531638371f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_af66a7d0d4e24f9cfba2c2531638371f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_af66a7d0d4e24f9cfba2c2531638371f_cobalt-strike_icedid_njrat_satacom_stealc
- Size 748KB
- SHA256 ed6702a7599556ee1a7cb27e9a673da49e23d9b535db70cb339ca333d9b74ed9
- MD5 af66a7d0d4e24f9cfba2c2531638371f
- SHA1 192a844457929111bc717c2f02577da7d695193c
- SHA512 03f34a8d6095e69685ca6a414c05321d52c248f5e8b3533f529763af07cc3a7b89fb2136ee4b41f53dedc32f0b635c69623c96f10e9acb699693f0a742e6f64c
- SSDEEP 12288:5NGG3U3ITEmUbqLELjQuIcLC7vWfnfgc6JBymiw2NyVyACTp+RW0u2sO:pAIAmUbqofQuI8aIsimiwhVyAYpoRsO
- TLSH T11CF4E155FBA414F9E177813CCD634606EA727C9A0770ABCF13A48A962F236D18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.