General
- Target 2026-08-30_0328b35c67c07d02053f0b62534343e3_cobalt-strike_icedid_njrat_satacom_stealc
- Size 7.1MB
- Sample260830-2dsdta1eqd
- SHA256 f14314ce4edd918a75368c6eb18c4f63ac40783f6130328195cafc6c39f4fd37
- MD5 0328b35c67c07d02053f0b62534343e3
- SHA1 e25f6558718703d4296c0000a7ccb79ef74c6203
- SHA512 87b795ae92e51b82bfb163dbec11d781082d69f5c3d78a4bb2f79063879d09f481477267012457083235e45c8685c950eb2d4b46b383cf5eecd5de9e222d34d3
- SSDEEP 98304:nnqZOKtTwzcxgYkd6H0/5lKhjrndk1pKy:nqZFaoxnH0xUVrdk1p
- TLSH T1DB76E007F36343AEC17299388EA2C312F771BC505B25A3CB76842A699E9B1F41DF56D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-30_0328b35c67c07d02053f0b62534343e3_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_0328b35c67c07d02053f0b62534343e3_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_0328b35c67c07d02053f0b62534343e3_cobalt-strike_icedid_njrat_satacom_stealc
- Size 7.1MB
- SHA256 f14314ce4edd918a75368c6eb18c4f63ac40783f6130328195cafc6c39f4fd37
- MD5 0328b35c67c07d02053f0b62534343e3
- SHA1 e25f6558718703d4296c0000a7ccb79ef74c6203
- SHA512 87b795ae92e51b82bfb163dbec11d781082d69f5c3d78a4bb2f79063879d09f481477267012457083235e45c8685c950eb2d4b46b383cf5eecd5de9e222d34d3
- SSDEEP 98304:nnqZOKtTwzcxgYkd6H0/5lKhjrndk1pKy:nqZFaoxnH0xUVrdk1p
- TLSH T1DB76E007F36343AEC17299388EA2C312F771BC505B25A3CB76842A699E9B1F41DF56D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.