General
- Target 2026-08-11_2a040234f1944b235fee4f0cb753fc45_cobalt-strike_icedid_njrat_satacom_stealc
- Size 776KB
- Sample260811-rwfgvs11as
- SHA256 456bab5681e8cbeeef8d3d07bf240b1d0d66b57a82949695d4eb2cb32b3bb736
- MD5 2a040234f1944b235fee4f0cb753fc45
- SHA1 52a4ca9581a4fac6a7877b26b65083b21f3fba8a
- SHA512 c48fb854464357ea8cafc0619d1e28055877a3e5a9418618209975e14396977885ec6578fd39840ee7bfc2703988e1434fb52ce8cfe8e1c5d2ebecde22811331
- SSDEEP 24576:ZAIAmUbqoFQ8UAZjkq0lZO8p9m/RBRV8q:Z5A5uoyC1kq6O8C/Dcq
- TLSH T18C05E115FAA414F9E273C17CCE634601EA727C5A4760ABCF13A48A961F33AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_2a040234f1944b235fee4f0cb753fc45_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_2a040234f1944b235fee4f0cb753fc45_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_2a040234f1944b235fee4f0cb753fc45_cobalt-strike_icedid_njrat_satacom_stealc
- Size 776KB
- SHA256 456bab5681e8cbeeef8d3d07bf240b1d0d66b57a82949695d4eb2cb32b3bb736
- MD5 2a040234f1944b235fee4f0cb753fc45
- SHA1 52a4ca9581a4fac6a7877b26b65083b21f3fba8a
- SHA512 c48fb854464357ea8cafc0619d1e28055877a3e5a9418618209975e14396977885ec6578fd39840ee7bfc2703988e1434fb52ce8cfe8e1c5d2ebecde22811331
- SSDEEP 24576:ZAIAmUbqoFQ8UAZjkq0lZO8p9m/RBRV8q:Z5A5uoyC1kq6O8C/Dcq
- TLSH T18C05E115FAA414F9E273C17CCE634601EA727C5A4760ABCF13A48A961F33AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.