General
- Target 2026-08-20_7db5a564580fdebe4e9332c0b15f7aca_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.4MB
- Sample260820-cwgbtsdn51
- SHA256 f7947ea59d4d9c4bb73ac5d811f5ad901efca2087cbe0832b14008bb82b10b89
- MD5 7db5a564580fdebe4e9332c0b15f7aca
- SHA1 2c8c1e5d5d5de55c9ccca3bbc5f3ee89be2042ab
- SHA512 97cb5172b4ada02d40b214663d8d5f45f595568341b429aca0ce6e670b621139931b2c60defde809d57afcdf21783627cfb7b1f434033b9e3db37f66300f049a
- SSDEEP 24576:5/wkPaKQFuf0xAo38g35J71SRrbmAbPV4p1WHkP61K38Eu/xPHEatpm1i2ndJ8:2kP5Ffw3bJw+VPqhEr02nL8
- TLSH T190C5AE43B388418DD4267D348B91E70BB336B864171486CBBBC51AADDEAF5E08B77781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_7db5a564580fdebe4e9332c0b15f7aca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_7db5a564580fdebe4e9332c0b15f7aca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_7db5a564580fdebe4e9332c0b15f7aca_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.4MB
- SHA256 f7947ea59d4d9c4bb73ac5d811f5ad901efca2087cbe0832b14008bb82b10b89
- MD5 7db5a564580fdebe4e9332c0b15f7aca
- SHA1 2c8c1e5d5d5de55c9ccca3bbc5f3ee89be2042ab
- SHA512 97cb5172b4ada02d40b214663d8d5f45f595568341b429aca0ce6e670b621139931b2c60defde809d57afcdf21783627cfb7b1f434033b9e3db37f66300f049a
- SSDEEP 24576:5/wkPaKQFuf0xAo38g35J71SRrbmAbPV4p1WHkP61K38Eu/xPHEatpm1i2ndJ8:2kP5Ffw3bJw+VPqhEr02nL8
- TLSH T190C5AE43B388418DD4267D348B91E70BB336B864171486CBBBC51AADDEAF5E08B77781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.