General
- Target 2026-08-24_d5d6d9fc7a9ad8bc5e9aaf942dce29d4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.0MB
- Sample260824-3rp2aafd82
- SHA256 80558241f2061ae1afe4d275f6edff5836b231f1dcd6d6c4250e36cbfc820a7d
- MD5 d5d6d9fc7a9ad8bc5e9aaf942dce29d4
- SHA1 71575d8b7abcd1c2eb5b583aa0d38d4dc9db17ac
- SHA512 638167b602cac8df2d7fdd73f51028dea07947ac6053e9e7fcaf9b66f5c5e0c3c11213d0fb7d176422a48acada896b94f784da00d31d92d70fc3bfb617561043
- SSDEEP 24576:sGKzSwBOXixyxZhtpNFWAtQFdZuR1pkJ8wrdw3I8aD1yfg9L5J2pb3tfIZVYnHOO:Oz+Ssxflw+QHZuBXooaDkg9D2XPnuP
- TLSH T10EA5BE4AB3A501F8D1B7D078C597A70BEA71740E07348ADF17D04AA22F67AE19E7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_d5d6d9fc7a9ad8bc5e9aaf942dce29d4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_d5d6d9fc7a9ad8bc5e9aaf942dce29d4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.0MB
- SHA256 80558241f2061ae1afe4d275f6edff5836b231f1dcd6d6c4250e36cbfc820a7d
- MD5 d5d6d9fc7a9ad8bc5e9aaf942dce29d4
- SHA1 71575d8b7abcd1c2eb5b583aa0d38d4dc9db17ac
- SHA512 638167b602cac8df2d7fdd73f51028dea07947ac6053e9e7fcaf9b66f5c5e0c3c11213d0fb7d176422a48acada896b94f784da00d31d92d70fc3bfb617561043
- SSDEEP 24576:sGKzSwBOXixyxZhtpNFWAtQFdZuR1pkJ8wrdw3I8aD1yfg9L5J2pb3tfIZVYnHOO:Oz+Ssxflw+QHZuBXooaDkg9D2XPnuP
- TLSH T10EA5BE4AB3A501F8D1B7D078C597A70BEA71740E07348ADF17D04AA22F67AE19E7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger