General
- Target 2026-08-24_a6b8ded591f2430200e69fc2a854ea1d_cobalt-strike_icedid_njrat_satacom
- Size 3.9MB
- Sample260825-ft4k5axane
- SHA256 9d745b9466fe569ed7e3f9a76d1c7f416960ef7ee5a2f9dcc54c69695c89c843
- MD5 a6b8ded591f2430200e69fc2a854ea1d
- SHA1 5cd59f9a6a477777f2c378a4330b8330fe4b3eca
- SHA512 47e1f0f672be2b5df0c43b6c9aba62f50d380fea1e46d49cb589493e9fac56a5686e16a209ab4bcc48eddb17fef4607a09c39a7b8760e8b234e6c102aa70fe2e
- SSDEEP 49152:IWPP7/Dr7ZiviNpVkclOsgmML5MzLDY1wwrP9ZrHM0PP6UvCfWDoADIBN9//uf4:VnbDnZoiBfOAOKPYvP9ZrVa2CfWDv4
- TLSH T13916F11BAAA810E1D1B7C03EC9E7565FFDB13496433197C707948A9A1B27BF49A3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_a6b8ded591f2430200e69fc2a854ea1d_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_a6b8ded591f2430200e69fc2a854ea1d_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_a6b8ded591f2430200e69fc2a854ea1d_cobalt-strike_icedid_njrat_satacom
- Size 3.9MB
- SHA256 9d745b9466fe569ed7e3f9a76d1c7f416960ef7ee5a2f9dcc54c69695c89c843
- MD5 a6b8ded591f2430200e69fc2a854ea1d
- SHA1 5cd59f9a6a477777f2c378a4330b8330fe4b3eca
- SHA512 47e1f0f672be2b5df0c43b6c9aba62f50d380fea1e46d49cb589493e9fac56a5686e16a209ab4bcc48eddb17fef4607a09c39a7b8760e8b234e6c102aa70fe2e
- SSDEEP 49152:IWPP7/Dr7ZiviNpVkclOsgmML5MzLDY1wwrP9ZrHM0PP6UvCfWDoADIBN9//uf4:VnbDnZoiBfOAOKPYvP9ZrVa2CfWDv4
- TLSH T13916F11BAAA810E1D1B7C03EC9E7565FFDB13496433197C707948A9A1B27BF49A3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.