General
- Target 2026-08-14_88670e4aab281e3639d155676bdc7027_cobalt-strike_icedid_njrat_satacom_stealc
- Size 431KB
- Sample260814-qfnymathka
- SHA256 a0fa7a3c4dbb279aa5f0360b135390ba56333fb0a1b00855527895d430688760
- MD5 88670e4aab281e3639d155676bdc7027
- SHA1 71ddc9fac2d140cde933b733a2a89dca99043081
- SHA512 b8eec1f9c6670361bef1cd97779bfb67cc1346484e6f040be84dbb906fe90d253274bd47a537749acbd293593fb06ba872b45b4107965c24ee625dea73d9ffc0
- SSDEEP 6144:bnjwMMhK5BQ8bkTqA/sxEneBKWjoNN/EN43C4chaIv+5/AF:fwMMhK5eSY/syer4E8YZ2xE
- TLSH T139946C25E79514FDE177C178CA638902EB72784A0370EACF03989A761E276E45E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-14_88670e4aab281e3639d155676bdc7027_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_88670e4aab281e3639d155676bdc7027_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_88670e4aab281e3639d155676bdc7027_cobalt-strike_icedid_njrat_satacom_stealc
- Size 431KB
- SHA256 a0fa7a3c4dbb279aa5f0360b135390ba56333fb0a1b00855527895d430688760
- MD5 88670e4aab281e3639d155676bdc7027
- SHA1 71ddc9fac2d140cde933b733a2a89dca99043081
- SHA512 b8eec1f9c6670361bef1cd97779bfb67cc1346484e6f040be84dbb906fe90d253274bd47a537749acbd293593fb06ba872b45b4107965c24ee625dea73d9ffc0
- SSDEEP 6144:bnjwMMhK5BQ8bkTqA/sxEneBKWjoNN/EN43C4chaIv+5/AF:fwMMhK5eSY/syer4E8YZ2xE
- TLSH T139946C25E79514FDE177C178CA638902EB72784A0370EACF03989A761E276E45E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.