General
- Target 2026-09-04_6bd640172350f29dfc5a1edf5ccc3a45_cobalt-strike_icedid_njrat_satacom_stealc
- Size 476KB
- Sample260905-js4fhszekb
- SHA256 6f25491c64286c326f8a5041f7d47998b9ac2276f57961e39214ec5aacfc11e9
- MD5 6bd640172350f29dfc5a1edf5ccc3a45
- SHA1 fbc8055862b7c518da8e5911d92759307f06d81a
- SHA512 9416410c12995ed267dcd8e790076d4fec9ad7b7266f87b056c59e1eb7f00d2ab3b459770424c34dc5d35e619cc7fd2c39de6f1bad996f0a65d31085c01615d9
- SSDEEP 6144:oWcXPE0iktZdq3akA8BNlInWjBrtInlxdf9LI4IsCpIT8uit1:25w7lInWjbInzd9HIsaI
- TLSH T186A43975E66400ADE156D1BB897E4903D6727C4A0320ABCB0394FD621E36EDCCA3AF1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6bd640172350f29dfc5a1edf5ccc3a45_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6bd640172350f29dfc5a1edf5ccc3a45_cobalt-strike_icedid_njrat_satacom_stealc
- Size 476KB
- SHA256 6f25491c64286c326f8a5041f7d47998b9ac2276f57961e39214ec5aacfc11e9
- MD5 6bd640172350f29dfc5a1edf5ccc3a45
- SHA1 fbc8055862b7c518da8e5911d92759307f06d81a
- SHA512 9416410c12995ed267dcd8e790076d4fec9ad7b7266f87b056c59e1eb7f00d2ab3b459770424c34dc5d35e619cc7fd2c39de6f1bad996f0a65d31085c01615d9
- SSDEEP 6144:oWcXPE0iktZdq3akA8BNlInWjBrtInlxdf9LI4IsCpIT8uit1:25w7lInWjbInzd9HIsaI
- TLSH T186A43975E66400ADE156D1BB897E4903D6727C4A0320ABCB0394FD621E36EDCCA3AF1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Deletes itself
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.