Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/09/2026, 23:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_fec024462229bdcb5b8fa2f45012b623_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_fec024462229bdcb5b8fa2f45012b623_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-23_fec024462229bdcb5b8fa2f45012b623_cobalt-strike_icedid_njrat_satacom_stealc.exe
- Size 871KB
- Sample260923-3pxcksgd67
- SHA256 846b58225d1f38e30e04cc15b05b2abe9951ce0b98efb0105f05d2be8e4a8d89
- MD5 fec024462229bdcb5b8fa2f45012b623
- SHA1 303c2489313acff92acb9ab43f6474bd71ab30fa
- SHA512 c08d4717c33237144b3ac19adf4a91c005f379b06ecf9aba66934f726386ca244936dab66294931ce6a431192fec2ecadfe3572e8bea0f56c9aaa2acab3341e1
- SSDEEP 12288:INGG3U3ITEmUbqLELHVBiZpa84sNj4nTTIdL8FdOfagXAJzYcRY3btz:2AIAmUbqozVBiZpa9s1mgdgFXgkM93R
- TLSH T13A15F155EAA414F9E273C17CCD634605EA727CAA07B0EBCF1394499A1F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com