General
- Target 2026-08-10_5d0f1d4b45734c9afb7a657950f7df55_cobalt-strike_icedid_njrat_satacom_stealc
- Size 822KB
- Sample260810-srx2saxtft
- SHA256 0e989994d70bf8b015875c50732bd39f963db8263732e5ef3448b53f0b4a887b
- MD5 5d0f1d4b45734c9afb7a657950f7df55
- SHA1 1f38e818bbfaa5e78a0527dc24c6f16f25d2a759
- SHA512 51db4d21ec32f0050e8b702f056bcf78c20fa7554305a14f24c7685f74fbf8beb8eee13d8fb5c26c3ac48baecf6a138e2946d1e45131ebf034f496db5561b9f9
- SSDEEP 24576:BAIAmUbqomj8UA9h/wD5KAaNzJws6pr0BrKRMFN:B5A5uosC9h/smzJws6ErKwN
- TLSH T10005F115F7A814F9E173913CCDB38506EA727C5A0760D6DB23A4899B2F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5d0f1d4b45734c9afb7a657950f7df55_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_5d0f1d4b45734c9afb7a657950f7df55_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5d0f1d4b45734c9afb7a657950f7df55_cobalt-strike_icedid_njrat_satacom_stealc
- Size 822KB
- SHA256 0e989994d70bf8b015875c50732bd39f963db8263732e5ef3448b53f0b4a887b
- MD5 5d0f1d4b45734c9afb7a657950f7df55
- SHA1 1f38e818bbfaa5e78a0527dc24c6f16f25d2a759
- SHA512 51db4d21ec32f0050e8b702f056bcf78c20fa7554305a14f24c7685f74fbf8beb8eee13d8fb5c26c3ac48baecf6a138e2946d1e45131ebf034f496db5561b9f9
- SSDEEP 24576:BAIAmUbqomj8UA9h/wD5KAaNzJws6pr0BrKRMFN:B5A5uosC9h/smzJws6ErKwN
- TLSH T10005F115F7A814F9E173913CCDB38506EA727C5A0760D6DB23A4899B2F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.