423e8aee20c342108300ca4e65060ba64dd43fd0537215b5fdc53251714e69e5

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 04:48

Target
2026-08-13_62427eb5675af83d29f171389cf70a23_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 777KB
Sample260813-fe7dgabl9y
SHA256 423e8aee20c342108300ca4e65060ba64dd43fd0537215b5fdc53251714e69e5
MD5 62427eb5675af83d29f171389cf70a23
SHA1 6254601ea439d121f4e5c2889c5a8386c7d01db2
SHA512 9365fde2ea77fa486f0af04e6debe3ff714b240c39ae985f66cf66b31687048a8aab55b7bfe42d11c20e0758cd63491688a090e96d1b794248baf931c9aa43b3
SSDEEP 12288:N7TQho/8ZCE+BsbdvTJhOT5v3jKvqy1bRMDSg3R:N7UC/ZgdvTJhONvObemg
TLSH
T113055C26AA6801ECD177D2B98F569503F7B2B8490330AFDF039099662F176D85F3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

C:\Users\Admin\AppData\Local\Temp\2026-08-13_62427eb5675af83d29f171389cf70a23_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-13_62427eb5675af83d29f171389cf70a23_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
PID:5820

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact