General
- Target 2026-08-27_19ed65071bf263c6e6a7a0cc464068fe_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.8MB
- Sample260827-1xjekszzbw
- SHA256 b112677f7f7217c2c2bc74a3ce7b6ca5699916a901c06ec52c390f84e0f8f7c5
- MD5 19ed65071bf263c6e6a7a0cc464068fe
- SHA1 c5db279a8277b83642f0f4807ae4d640ef53a3ef
- SHA512 3ee762c009f283e1eac7fe40fcb0ab0f2aadd281112f81332d40f97d77c47878e79d08cae953cdbaae8d8ddf917c82fd500241d411f0f091acecb8239a885c91
- SSDEEP 49152:Bs8dsM6+yo0L5163vQNcZZOsVXhow2jEJOX77jzeucV1dz1TJM3hzi9:BOoY2n8uOXjqrF10
- TLSH T10BD5D04AA3B900F8D0B7D178CA465517EBB2B845173597DB1390CAA72F23EE11B7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-27_19ed65071bf263c6e6a7a0cc464068fe_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_19ed65071bf263c6e6a7a0cc464068fe_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.8MB
- SHA256 b112677f7f7217c2c2bc74a3ce7b6ca5699916a901c06ec52c390f84e0f8f7c5
- MD5 19ed65071bf263c6e6a7a0cc464068fe
- SHA1 c5db279a8277b83642f0f4807ae4d640ef53a3ef
- SHA512 3ee762c009f283e1eac7fe40fcb0ab0f2aadd281112f81332d40f97d77c47878e79d08cae953cdbaae8d8ddf917c82fd500241d411f0f091acecb8239a885c91
- SSDEEP 49152:Bs8dsM6+yo0L5163vQNcZZOsVXhow2jEJOX77jzeucV1dz1TJM3hzi9:BOoY2n8uOXjqrF10
- TLSH T10BD5D04AA3B900F8D0B7D178CA465517EBB2B845173597DB1390CAA72F23EE11B7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.