General
- Target 2026-08-12_4f02872c52eb33c089c20755035c7ef7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 474KB
- Sample260812-m5halafk3z
- SHA256 1a3f8d4f025dec0eb03c68ba5690ff1ccc073069a85bcca9add2690e9fa2cb13
- MD5 4f02872c52eb33c089c20755035c7ef7
- SHA1 2d347b326d699c2754db273b7ad5914aa5f6e144
- SHA512 5a52efd7bb1a21c8b75425b7ec74ab85e83f3f6374a40820688ec10783abb8df8b2387b28a9903de2cc73aadc091bd0395c5aa9e012eb0ad35984e313ec0f403
- SSDEEP 6144:5l3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz0F2g3M24GDpjghDi23DPJp4VD+Yy6b:nNGG3U3ITEmUbqLELzqghDi237Jp4FyW
- TLSH T1DEA4AF55FBA814F9E173C17CCD638601DA727C9A0760ABCF13A44A962F23AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_4f02872c52eb33c089c20755035c7ef7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_4f02872c52eb33c089c20755035c7ef7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_4f02872c52eb33c089c20755035c7ef7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 474KB
- SHA256 1a3f8d4f025dec0eb03c68ba5690ff1ccc073069a85bcca9add2690e9fa2cb13
- MD5 4f02872c52eb33c089c20755035c7ef7
- SHA1 2d347b326d699c2754db273b7ad5914aa5f6e144
- SHA512 5a52efd7bb1a21c8b75425b7ec74ab85e83f3f6374a40820688ec10783abb8df8b2387b28a9903de2cc73aadc091bd0395c5aa9e012eb0ad35984e313ec0f403
- SSDEEP 6144:5l3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfz0F2g3M24GDpjghDi23DPJp4VD+Yy6b:nNGG3U3ITEmUbqLELzqghDi237Jp4FyW
- TLSH T1DEA4AF55FBA814F9E173C17CCD638601DA727C9A0760ABCF13A44A962F23AD19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.