General
- Target 2026-08-16_4fb0b3996d6b58eb17b133528800d134_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- Sample260816-e9sm5adk3x
- SHA256 cf468466c6aec4130488e2bb87dc83fdea0ab2abd606cb49bf918bdfd33941fc
- MD5 4fb0b3996d6b58eb17b133528800d134
- SHA1 094802ad7f372ae6a670f37c77d04000dcc92986
- SHA512 56ca8cf62b339830d92f076a5d5a855d873c1a2138d5ac2e13c572cba940a7ebabe116ca07e793c854fd3f786ae5ca4b33742a633894e6327636d58c08a48342
- SSDEEP 49152:Wp888OhpdWIxJ1T1f0j3f3CQVHMTyEfa34OKEe5:ludWIP1TOfszJE2
- TLSH T162758E0AA2B901F8D067D179C9065517EBB2B8051F34A7DF5790CEA62F23EE11B7E324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_4fb0b3996d6b58eb17b133528800d134_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_4fb0b3996d6b58eb17b133528800d134_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_4fb0b3996d6b58eb17b133528800d134_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.6MB
- SHA256 cf468466c6aec4130488e2bb87dc83fdea0ab2abd606cb49bf918bdfd33941fc
- MD5 4fb0b3996d6b58eb17b133528800d134
- SHA1 094802ad7f372ae6a670f37c77d04000dcc92986
- SHA512 56ca8cf62b339830d92f076a5d5a855d873c1a2138d5ac2e13c572cba940a7ebabe116ca07e793c854fd3f786ae5ca4b33742a633894e6327636d58c08a48342
- SSDEEP 49152:Wp888OhpdWIxJ1T1f0j3f3CQVHMTyEfa34OKEe5:ludWIP1TOfszJE2
- TLSH T162758E0AA2B901F8D067D179C9065517EBB2B8051F34A7DF5790CEA62F23EE11B7E324
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.