General
- Target 2026-08-13_4eda5938e40f9f936c8c1a2b1c302251_cobalt-strike_icedid_njrat_satacom_stealc
- Size 625KB
- Sample260813-lpr97aeq4s
- SHA256 199b395d8512509a306e0789e9b613223a6ffa30484dfefd084899802641156b
- MD5 4eda5938e40f9f936c8c1a2b1c302251
- SHA1 011825fc7d980e2bb2a89cd8da143cfb3cfef69e
- SHA512 c4a300bf540dc69a15501c5186137eeb0109fc9dda4abf7ad13db421eb3c88a3826d4dc1fd8440408c457033740c908ff26b431ec3370cfcefda618fbb3dd9c4
- SSDEEP 12288:BNGG3U3ITEmUbqLELVL8ckvy/rTopoin1awU:BAIAmUbqoR0LawU
- TLSH T1C9D4D015FBA814F9E173C17CCD634605EAB27C9A0760A7CF23948A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_4eda5938e40f9f936c8c1a2b1c302251_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_4eda5938e40f9f936c8c1a2b1c302251_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_4eda5938e40f9f936c8c1a2b1c302251_cobalt-strike_icedid_njrat_satacom_stealc
- Size 625KB
- SHA256 199b395d8512509a306e0789e9b613223a6ffa30484dfefd084899802641156b
- MD5 4eda5938e40f9f936c8c1a2b1c302251
- SHA1 011825fc7d980e2bb2a89cd8da143cfb3cfef69e
- SHA512 c4a300bf540dc69a15501c5186137eeb0109fc9dda4abf7ad13db421eb3c88a3826d4dc1fd8440408c457033740c908ff26b431ec3370cfcefda618fbb3dd9c4
- SSDEEP 12288:BNGG3U3ITEmUbqLELVL8ckvy/rTopoin1awU:BAIAmUbqoR0LawU
- TLSH T1C9D4D015FBA814F9E173C17CCD634605EAB27C9A0760A7CF23948A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.