General
- Target 2026-09-22_0889d61a9afad5decb6e8b0858490c5b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.9MB
- Sample260922-2mf25sys5j
- SHA256 eb26c85c60590c7012dd4128e4f310ca6e009d0bc84138ea9969209abb298931
- MD5 0889d61a9afad5decb6e8b0858490c5b
- SHA1 0d51a13fc070c511178dd6451479f63cd447c4b7
- SHA512 06d4d0d10ff93fb36836a6d3200c906c0d15528d323082d23cf239dfc3a436c956a3c132c8745c487e20de88911f2c5a14a5e44083a3ccb389b7dab3039b90d3
- SSDEEP 24576:Tunw9qbcKPwTeg3EkCpq+qWJIBuVdDExTL9+vgd7rnBgLyT/dKXVQGlGqeBRxB:Tuw9qbrWKXiBkExTsgdvnBT5KXmqib
- TLSH T11795F14082B415F5F17396F8C6FAAB0675707883BB2109D31A82D6EFD9B1CB0D8356A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-22_0889d61a9afad5decb6e8b0858490c5b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-22_0889d61a9afad5decb6e8b0858490c5b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-22_0889d61a9afad5decb6e8b0858490c5b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.9MB
- SHA256 eb26c85c60590c7012dd4128e4f310ca6e009d0bc84138ea9969209abb298931
- MD5 0889d61a9afad5decb6e8b0858490c5b
- SHA1 0d51a13fc070c511178dd6451479f63cd447c4b7
- SHA512 06d4d0d10ff93fb36836a6d3200c906c0d15528d323082d23cf239dfc3a436c956a3c132c8745c487e20de88911f2c5a14a5e44083a3ccb389b7dab3039b90d3
- SSDEEP 24576:Tunw9qbcKPwTeg3EkCpq+qWJIBuVdDExTL9+vgd7rnBgLyT/dKXVQGlGqeBRxB:Tuw9qbrWKXiBkExTsgdvnBT5KXmqib
- TLSH T11795F14082B415F5F17396F8C6FAAB0675707883BB2109D31A82D6EFD9B1CB0D8356A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.