General
- Target 2026-08-13_17d3b03fe530540db596e95340ab9549_cobalt-strike_icedid_njrat_satacom_stealc
- Size 511KB
- Sample260813-vehsfacn7y
- SHA256 4a1ff29c338dbbd857cc3de1cc2bbca74f40b77093fb2f2f2f02be2f16785f9f
- MD5 17d3b03fe530540db596e95340ab9549
- SHA1 f84b94c97ccd5631e8cbc424f9c01b07adc53509
- SHA512 7c6b92fd5883a40c275d5bcef02943ec94cb20a839dfff580b4521f906c06106bc850f960e6f6d866eeb3ee52ada85f442b007a4d361025e890d03200b51f7eb
- SSDEEP 6144:hl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzxFeg8M29KgVSd8Eg2LL3mjQd+6bSF/:vNGG3U3ITEmUbqLELOtILaukcPVa
- TLSH T192B4BF15FBA814F9E273817CCD634606EA727C5A07609BCF13A48A962F236D1DE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_17d3b03fe530540db596e95340ab9549_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_17d3b03fe530540db596e95340ab9549_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_17d3b03fe530540db596e95340ab9549_cobalt-strike_icedid_njrat_satacom_stealc
- Size 511KB
- SHA256 4a1ff29c338dbbd857cc3de1cc2bbca74f40b77093fb2f2f2f02be2f16785f9f
- MD5 17d3b03fe530540db596e95340ab9549
- SHA1 f84b94c97ccd5631e8cbc424f9c01b07adc53509
- SHA512 7c6b92fd5883a40c275d5bcef02943ec94cb20a839dfff580b4521f906c06106bc850f960e6f6d866eeb3ee52ada85f442b007a4d361025e890d03200b51f7eb
- SSDEEP 6144:hl3VfGYBZj7Oa7Q0s9Sk82ro9mTb9cLEfzxFeg8M29KgVSd8Eg2LL3mjQd+6bSF/:vNGG3U3ITEmUbqLELOtILaukcPVa
- TLSH T192B4BF15FBA814F9E273817CCD634606EA727C5A07609BCF13A48A962F236D1DE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.