General
- Target 2026-09-04_498253fb072cd948ab97301fd4582a01_cobalt-strike_icedid_njrat_satacom_stealc
- Size 409KB
- Sample260905-n32f5atflc
- SHA256 c3e704ee43e08ef8315b450e91ce11d1453f3d4f050be10034f52549ba34f752
- MD5 498253fb072cd948ab97301fd4582a01
- SHA1 b9ece86adc6fa226e26e3e8b3cd7c7b004027b08
- SHA512 bfd6de48f3a4d453105f6dfe6d96eb0d7c3feab1063db0e7f15ea56092511d029d1790f28863485476d0a1cce8f2b9767802822393762a8275f6386651f24fb8
- SSDEEP 6144:XLGMiaXkfnvVcSGAT6mzeEm9RiTpFyfJ8NXCu7uTOvX2FX7HAYtG2npuPEx2:dJkNCEm9R+Fyf+yu7LvX2d7lo2npu
- TLSH T1B9946E55E7A800FDE167D1B8CD634902D7B2B84A0361EACF13989AA71F13AD45E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_498253fb072cd948ab97301fd4582a01_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_498253fb072cd948ab97301fd4582a01_cobalt-strike_icedid_njrat_satacom_stealc
- Size 409KB
- SHA256 c3e704ee43e08ef8315b450e91ce11d1453f3d4f050be10034f52549ba34f752
- MD5 498253fb072cd948ab97301fd4582a01
- SHA1 b9ece86adc6fa226e26e3e8b3cd7c7b004027b08
- SHA512 bfd6de48f3a4d453105f6dfe6d96eb0d7c3feab1063db0e7f15ea56092511d029d1790f28863485476d0a1cce8f2b9767802822393762a8275f6386651f24fb8
- SSDEEP 6144:XLGMiaXkfnvVcSGAT6mzeEm9RiTpFyfJ8NXCu7uTOvX2FX7HAYtG2npuPEx2:dJkNCEm9R+Fyf+yu7LvX2d7lo2npu
- TLSH T1B9946E55E7A800FDE167D1B8CD634902D7B2B84A0361EACF13989AA71F13AD45E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.