General
- Target 2026-09-16_a77fa8cad052a1238b87c26bf7297066_cobalt-strike_icedid_njrat_satacom_stealc
- Size 345KB
- Sample260916-w1827ateqb
- SHA256 0d888f47716cbfc05900f69ccf7f827e1435be2f8f72d270a436d13f76eae9f9
- MD5 a77fa8cad052a1238b87c26bf7297066
- SHA1 4d07b53aab4233ed844546af62b1624283ea73a5
- SHA512 98bdc71ae5a05780e29dd1826769c15fb08ee6a495d4085232246a5029cd5540959ef44e3e59577c12b0f5303c8799d3ee7105d3675d0f127f665f7b80c1408d
- SSDEEP 3072:cwQ0w43Yv/MsFYlFsQcJL+o2icLaHHi12PUr28K6UbXd20begL4CjNCxFiwE+aHM:czosHQaHp+K6UbXd2Weg80M1sy1TlW
- TLSH T1C2747D66F76414FDE1B7D5B8C9664902EB727C4A03706ACF339019A22F276E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-16_a77fa8cad052a1238b87c26bf7297066_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_a77fa8cad052a1238b87c26bf7297066_cobalt-strike_icedid_njrat_satacom_stealc
- Size 345KB
- SHA256 0d888f47716cbfc05900f69ccf7f827e1435be2f8f72d270a436d13f76eae9f9
- MD5 a77fa8cad052a1238b87c26bf7297066
- SHA1 4d07b53aab4233ed844546af62b1624283ea73a5
- SHA512 98bdc71ae5a05780e29dd1826769c15fb08ee6a495d4085232246a5029cd5540959ef44e3e59577c12b0f5303c8799d3ee7105d3675d0f127f665f7b80c1408d
- SSDEEP 3072:cwQ0w43Yv/MsFYlFsQcJL+o2icLaHHi12PUr28K6UbXd20begL4CjNCxFiwE+aHM:czosHQaHp+K6UbXd2Weg80M1sy1TlW
- TLSH T1C2747D66F76414FDE1B7D5B8C9664902EB727C4A03706ACF339019A22F276E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)