General
- Target 2026-09-23_5f9ae4bf524a9f1300f718bd488aab8b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.4MB
- Sample260924-jp8aas1bpb
- SHA256 f853d1a8a712a3c5677306ab8ec27f05994532dc405498a1b48b3e6e0a7c7c0a
- MD5 5f9ae4bf524a9f1300f718bd488aab8b
- SHA1 dcd1e511f405a495162122f00e396346db6e31c7
- SHA512 22623725c1f5c8c711818c0b8d7b02828026487223694a1dfcd5095c7fd3e8dcc5e5751310cc8893f473d69c23f828835d3ec701e0208c10bd08b4daca12a2d1
- SSDEEP 24576:l50+LU5232u8xFOY5ZDjXZQUDG5g1ACE6Nn+BG:l5a5tPxFOY/jXZZC5gBfN
- TLSH T142659E0BA2B540FCD06BD179CA075A07FBB2740517349ADB5690CA662F23FE11FBA325
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-23_5f9ae4bf524a9f1300f718bd488aab8b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_5f9ae4bf524a9f1300f718bd488aab8b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.4MB
- SHA256 f853d1a8a712a3c5677306ab8ec27f05994532dc405498a1b48b3e6e0a7c7c0a
- MD5 5f9ae4bf524a9f1300f718bd488aab8b
- SHA1 dcd1e511f405a495162122f00e396346db6e31c7
- SHA512 22623725c1f5c8c711818c0b8d7b02828026487223694a1dfcd5095c7fd3e8dcc5e5751310cc8893f473d69c23f828835d3ec701e0208c10bd08b4daca12a2d1
- SSDEEP 24576:l50+LU5232u8xFOY5ZDjXZQUDG5g1ACE6Nn+BG:l5a5tPxFOY/jXZZC5gBfN
- TLSH T142659E0BA2B540FCD06BD179CA075A07FBB2740517349ADB5690CA662F23FE11FBA325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.