General
- Target 2026-08-13_a030af502eda06b792bff36fcc92ced7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 547KB
- Sample260813-pphmjaah78
- SHA256 06c0a34fab9075af4af23525c0979f2e3c69a7fd664e3d455ddfbd1a2553da03
- MD5 a030af502eda06b792bff36fcc92ced7
- SHA1 5f7330fc3229aef4605d9aaf26cefd85f8878161
- SHA512 4919ae7f74457e7b8af440a872aa400bdb2e8eef3e1ed452fda1120266ca00b06a1986011a8309962014206d4d792b89d73378d8bf04754e4af78a2b903af949
- SSDEEP 12288:BNGG3U3ITEmUbqLEL0q/RMSCbQoXhA9QK:BAIAmUbqooiRMQIqJ
- TLSH T1A7C4C025FBA914F9E273C17CCE634502EA727C5A0760DBCB13A44A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_a030af502eda06b792bff36fcc92ced7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_a030af502eda06b792bff36fcc92ced7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_a030af502eda06b792bff36fcc92ced7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 547KB
- SHA256 06c0a34fab9075af4af23525c0979f2e3c69a7fd664e3d455ddfbd1a2553da03
- MD5 a030af502eda06b792bff36fcc92ced7
- SHA1 5f7330fc3229aef4605d9aaf26cefd85f8878161
- SHA512 4919ae7f74457e7b8af440a872aa400bdb2e8eef3e1ed452fda1120266ca00b06a1986011a8309962014206d4d792b89d73378d8bf04754e4af78a2b903af949
- SSDEEP 12288:BNGG3U3ITEmUbqLEL0q/RMSCbQoXhA9QK:BAIAmUbqooiRMQIqJ
- TLSH T1A7C4C025FBA914F9E273C17CCE634502EA727C5A0760DBCB13A44A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.