Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/08/2026, 13:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_3747dc96aea1b50c8c9a02e35aa363c6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_3747dc96aea1b50c8c9a02e35aa363c6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-13_3747dc96aea1b50c8c9a02e35aa363c6_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 638KB
- Sample260813-qpfcva1bpc
- SHA256 10e2cc4d4e9401cacd420be2037813cf8807b66153ee0befc0829cbc0f339e0d
- MD5 3747dc96aea1b50c8c9a02e35aa363c6
- SHA1 4da7a6a61487d3e1ff817f5c7df208f064837363
- SHA512 156eeb06e1aac624f1014e5fd73ea7b80408e879ad0239ca9ac83f759a4d69d089d0743d4d9d09fc1b234f38d38d68430ba81023e5d645b0f791c6de973a6b91
- SSDEEP 12288:6NGG3U3ITEmUbqLEL08gbqaJ1dRtb8GLFCXDaj09SP4Fe/Ju7f8T1:EAIAmUbqoI8gbF3RZ9F2Y0964Fecf8T1
- TLSH T1AAD4D055EBA814F9E273C17CCA634606EA727C9907A1D7CF13A449A62F336D08E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com