General
- Target 2026-08-13_3a854bd1690aaa5a413cab681bb3b741_cobalt-strike_icedid_njrat_satacom_stealc
- Size 753KB
- Sample260813-vbrwyacb87
- SHA256 d4dfe2a0581e4a383163c8966b12318303df5b996f9ad7665a374de969b01d25
- MD5 3a854bd1690aaa5a413cab681bb3b741
- SHA1 bbdacd4bd1cb2f4ee0cf21dcc3f0d04d8b65f58a
- SHA512 fce98d4006a3e03612726aaaacdb206a1b3bd305457dd769b912b61925592ad0d8ebb4382c68528767f43e59f2c9389c596d08e2c9491596db9c729d6456b929
- SSDEEP 12288:mNGG3U3ITEmUbqLELFn2BnbLHNnq9Bpr5t6Wu6Z8rVCKG+8ZBNkN1fY5Ocg22o0n:QAIAmUbqoK4vft5arVzG+GLkN1fyDg9n
- TLSH T1D5F4E125EBA814F9E273C17CCD634506DA727C9A4760E7CF13A44A962F23AD18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_3a854bd1690aaa5a413cab681bb3b741_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_3a854bd1690aaa5a413cab681bb3b741_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_3a854bd1690aaa5a413cab681bb3b741_cobalt-strike_icedid_njrat_satacom_stealc
- Size 753KB
- SHA256 d4dfe2a0581e4a383163c8966b12318303df5b996f9ad7665a374de969b01d25
- MD5 3a854bd1690aaa5a413cab681bb3b741
- SHA1 bbdacd4bd1cb2f4ee0cf21dcc3f0d04d8b65f58a
- SHA512 fce98d4006a3e03612726aaaacdb206a1b3bd305457dd769b912b61925592ad0d8ebb4382c68528767f43e59f2c9389c596d08e2c9491596db9c729d6456b929
- SSDEEP 12288:mNGG3U3ITEmUbqLELFn2BnbLHNnq9Bpr5t6Wu6Z8rVCKG+8ZBNkN1fY5Ocg22o0n:QAIAmUbqoK4vft5arVzG+GLkN1fyDg9n
- TLSH T1D5F4E125EBA814F9E273C17CCD634506DA727C9A4760E7CF13A44A962F23AD18E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.