General
- Target 2026-08-13_3747dc96aea1b50c8c9a02e35aa363c6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 638KB
- Sample260813-qpfcva1bpc
- SHA256 10e2cc4d4e9401cacd420be2037813cf8807b66153ee0befc0829cbc0f339e0d
- MD5 3747dc96aea1b50c8c9a02e35aa363c6
- SHA1 4da7a6a61487d3e1ff817f5c7df208f064837363
- SHA512 156eeb06e1aac624f1014e5fd73ea7b80408e879ad0239ca9ac83f759a4d69d089d0743d4d9d09fc1b234f38d38d68430ba81023e5d645b0f791c6de973a6b91
- SSDEEP 12288:6NGG3U3ITEmUbqLEL08gbqaJ1dRtb8GLFCXDaj09SP4Fe/Ju7f8T1:EAIAmUbqoI8gbF3RZ9F2Y0964Fecf8T1
- TLSH T1AAD4D055EBA814F9E273C17CCA634606EA727C9907A1D7CF13A449A62F336D08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_3747dc96aea1b50c8c9a02e35aa363c6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_3747dc96aea1b50c8c9a02e35aa363c6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_3747dc96aea1b50c8c9a02e35aa363c6_cobalt-strike_icedid_njrat_satacom_stealc
- Size 638KB
- SHA256 10e2cc4d4e9401cacd420be2037813cf8807b66153ee0befc0829cbc0f339e0d
- MD5 3747dc96aea1b50c8c9a02e35aa363c6
- SHA1 4da7a6a61487d3e1ff817f5c7df208f064837363
- SHA512 156eeb06e1aac624f1014e5fd73ea7b80408e879ad0239ca9ac83f759a4d69d089d0743d4d9d09fc1b234f38d38d68430ba81023e5d645b0f791c6de973a6b91
- SSDEEP 12288:6NGG3U3ITEmUbqLEL08gbqaJ1dRtb8GLFCXDaj09SP4Fe/Ju7f8T1:EAIAmUbqoI8gbF3RZ9F2Y0964Fecf8T1
- TLSH T1AAD4D055EBA814F9E273C17CCA634606EA727C9907A1D7CF13A449A62F336D08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.