General
- Target 2026-08-25_eb8d23a169671e45c71d09794d574a67_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.4MB
- Sample260826-ebvptssaqe
- SHA256 7c201f5a04b0b16648d8ff2387d8674cbc8775980619141d372c49090f36ae36
- MD5 eb8d23a169671e45c71d09794d574a67
- SHA1 b015a3dcf45b20d9c61a21927f4ebfad2b1ad472
- SHA512 fe6efb910961dfa546e6cac7ee51b13afb13b42888ab79a82b59ed6dc46d3e8d1014e659fa0273982867ce857db41b090f4ad9082d5d1024fce0979467a1e6d8
- SSDEEP 24576:2kPeN6MtW5LRZ0oR5hLYUTDAtSSdBH8YzgtSSd:2QeN6dBjywAnBc2gn
- TLSH T196659D36569840BCD1BAD1F8DF275907E772B44A03316EEF039069A22F176E49A3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-25_eb8d23a169671e45c71d09794d574a67_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_eb8d23a169671e45c71d09794d574a67_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_eb8d23a169671e45c71d09794d574a67_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.4MB
- SHA256 7c201f5a04b0b16648d8ff2387d8674cbc8775980619141d372c49090f36ae36
- MD5 eb8d23a169671e45c71d09794d574a67
- SHA1 b015a3dcf45b20d9c61a21927f4ebfad2b1ad472
- SHA512 fe6efb910961dfa546e6cac7ee51b13afb13b42888ab79a82b59ed6dc46d3e8d1014e659fa0273982867ce857db41b090f4ad9082d5d1024fce0979467a1e6d8
- SSDEEP 24576:2kPeN6MtW5LRZ0oR5hLYUTDAtSSdBH8YzgtSSd:2QeN6dBjywAnBc2gn
- TLSH T196659D36569840BCD1BAD1F8DF275907E772B44A03316EEF039069A22F176E49A3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt