General
- Target 2026-08-11_4bee77bd4668127ba5fd1884103bba00_cobalt-strike_icedid_njrat_satacom_stealc
- Size 818KB
- Sample260811-vncmsatzbv
- SHA256 4ad92550dbdf5064e3cc7c9af36b6e0594337b9b15310d0b014c6f36cf47d8aa
- MD5 4bee77bd4668127ba5fd1884103bba00
- SHA1 7f0765d465e26f8a80b86585458150ede1cf5d5e
- SHA512 ad26996015bad4d5040cca23fbea526621707ef744da58cb2fa1186abb2bbd1a068fbec8a41ac206b79c857c4e728d0bdfdaa314b7da8e86ab7ee54620beff32
- SSDEEP 12288:cNGG3U3ITEmUbqLELS69Bw0aMMXu9sfgXjO/l0Odp0QsSZcvPUbemXs:qAIAmUbqou6aHXu9scO/5ZsVPUym8
- TLSH T1C905F125EAA810F9E2B3C17CCE634505DA727C9A4770E7CB13A48A571F23AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_4bee77bd4668127ba5fd1884103bba00_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_4bee77bd4668127ba5fd1884103bba00_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_4bee77bd4668127ba5fd1884103bba00_cobalt-strike_icedid_njrat_satacom_stealc
- Size 818KB
- SHA256 4ad92550dbdf5064e3cc7c9af36b6e0594337b9b15310d0b014c6f36cf47d8aa
- MD5 4bee77bd4668127ba5fd1884103bba00
- SHA1 7f0765d465e26f8a80b86585458150ede1cf5d5e
- SHA512 ad26996015bad4d5040cca23fbea526621707ef744da58cb2fa1186abb2bbd1a068fbec8a41ac206b79c857c4e728d0bdfdaa314b7da8e86ab7ee54620beff32
- SSDEEP 12288:cNGG3U3ITEmUbqLELS69Bw0aMMXu9sfgXjO/l0Odp0QsSZcvPUbemXs:qAIAmUbqou6aHXu9scO/5ZsVPUym8
- TLSH T1C905F125EAA810F9E2B3C17CCE634505DA727C9A4770E7CB13A48A571F23AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.