General

  • Target
    2026-08-24_d5d6d9fc7a9ad8bc5e9aaf942dce29d4_cobalt-strike_icedid_njrat_satacom_stealc
  • Size 2.0MB
  • Sample260824-3rp2aafd82
  • SHA256 80558241f2061ae1afe4d275f6edff5836b231f1dcd6d6c4250e36cbfc820a7d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-24_d5d6d9fc7a9ad8bc5e9aaf942dce29d4_cobalt-strike_icedid_njrat_satacom_stealc
    • Size 2.0MB
    • SHA256 80558241f2061ae1afe4d275f6edff5836b231f1dcd6d6c4250e36cbfc820a7d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks