General
- Target 2026-09-04_37d6bf6fb1e778873c703a0a59d85104_cobalt-strike_icedid_njrat_satacom_stealc
- Size 535KB
- Sample260905-rhapfsdp3t
- SHA256 1ea4daed87c1f99d22c9d33aeade163aff0028ad4825d961605ec36a624884fb
- MD5 37d6bf6fb1e778873c703a0a59d85104
- SHA1 3b4b13079425e90655cc906423400aaf31089b68
- SHA512 47b251f811df55e3205bb3b01fa58798e3c5f2c560586907ca6ed03652ee9dc1fe5fefebbb03c30c0f11bf604e6d915cada6e6e58f75faa91743d53fc704d0a8
- SSDEEP 12288:77BpNtNIpefgT6IsZsmruIm1tsF7DAtztH4f:hp9vIcsmPm1tsFIY
- TLSH T1D0C41875925400B9E2A6D1BBC93E4903E6767C464321ABCB0394FD621E36DDCDA3AF1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_37d6bf6fb1e778873c703a0a59d85104_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_37d6bf6fb1e778873c703a0a59d85104_cobalt-strike_icedid_njrat_satacom_stealc
- Size 535KB
- SHA256 1ea4daed87c1f99d22c9d33aeade163aff0028ad4825d961605ec36a624884fb
- MD5 37d6bf6fb1e778873c703a0a59d85104
- SHA1 3b4b13079425e90655cc906423400aaf31089b68
- SHA512 47b251f811df55e3205bb3b01fa58798e3c5f2c560586907ca6ed03652ee9dc1fe5fefebbb03c30c0f11bf604e6d915cada6e6e58f75faa91743d53fc704d0a8
- SSDEEP 12288:77BpNtNIpefgT6IsZsmruIm1tsF7DAtztH4f:hp9vIcsmPm1tsFIY
- TLSH T1D0C41875925400B9E2A6D1BBC93E4903E6767C464321ABCB0394FD621E36DDCDA3AF1C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Deletes itself
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.