General
- Target 2026-08-10_5ebdba72c76b279c15f25647b3eb04f6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 753KB
- Sample260810-srm7ksxtet
- SHA256 f0e4352994f0c961517d8ec0039e27dd3cf1cfa1da58998cc8fadbf23daca15a
- MD5 5ebdba72c76b279c15f25647b3eb04f6
- SHA1 260bf08206163daccbf83c036e9324945970a8b8
- SHA512 3d68352709c9f866052b058589a08bc7ba74fd1b0bc828cbc3e192182558371124cb1ccdc1dda015cdd9806bebd59181a881d780b85adf112778690cafb9225a
- SSDEEP 12288:yNGG3U3ITEmUbqLELfadNhxLdw5T2PYKrTynsHM5SCooE0BXvNuMM:MAIAmUbqo7a7pw5SPY8ZM5SCoOBXVuX
- TLSH T173F4E115FBA410F9E277817CCD634605EA727C9A0770A7CF23A44A962F23AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5ebdba72c76b279c15f25647b3eb04f6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_5ebdba72c76b279c15f25647b3eb04f6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5ebdba72c76b279c15f25647b3eb04f6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 753KB
- SHA256 f0e4352994f0c961517d8ec0039e27dd3cf1cfa1da58998cc8fadbf23daca15a
- MD5 5ebdba72c76b279c15f25647b3eb04f6
- SHA1 260bf08206163daccbf83c036e9324945970a8b8
- SHA512 3d68352709c9f866052b058589a08bc7ba74fd1b0bc828cbc3e192182558371124cb1ccdc1dda015cdd9806bebd59181a881d780b85adf112778690cafb9225a
- SSDEEP 12288:yNGG3U3ITEmUbqLELfadNhxLdw5T2PYKrTynsHM5SCooE0BXvNuMM:MAIAmUbqo7a7pw5SPY8ZM5SCoOBXVuX
- TLSH T173F4E115FBA410F9E277817CCD634605EA727C9A0770A7CF23A44A962F23AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.