Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 03:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_2adfe362d7db14ff6a6cd342e061378e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_2adfe362d7db14ff6a6cd342e061378e_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-11_2adfe362d7db14ff6a6cd342e061378e_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 621KB
- Sample260811-d5afbavemd
- SHA256 21bf4ad28d87458721953f6ef559cafb8e181a7fbaf3bd217c09bcb31c6c41e7
- MD5 2adfe362d7db14ff6a6cd342e061378e
- SHA1 ba720d7e9d94cfaa26ecb331c1980abd2ea4f8b1
- SHA512 eda88a28dc36df742007cdba468ed7ba323c43151bbaa8c968d79f7c392c03708bcc85248c9a0686f0dc6b4f031ec824762b0fafe0d21c9ad41d3c3e60d3a1ad
- SSDEEP 12288:6NGG3U3ITEmUbqLEL22I8oFr6kH2gmHEO2DoMT4kt3einY:EAIAmUbqoa2I8ojHYHEO2DzHt3xY
- TLSH T1E8D4D015FBA804F9E277813CCD638A06EA727C9A4760D7CF139449962F23AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com