General
- Target 2026-09-24_1a50542727995b98f68fb27c0023bb1c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 692KB
- Sample260925-rfkrmszw9m
- SHA256 2ea2bafd5b0a0a4898bc55f419ce22448e2bfc17e9b0b440234739fa90babd50
- MD5 1a50542727995b98f68fb27c0023bb1c
- SHA1 a7a16c25bfe1decf8c524de1cd69bc830a3dbf9e
- SHA512 4fdb1d2c59881e0ad470118524190230a9b498c2766ce5b2afadcda4b2820d5a19046e24ebc17b05556f84acbc7b7619ef6a144209cc2da66cadcf1faa7fce3c
- SSDEEP 12288:FNGG3U3ITEmUbqLELvxsrAXq/VU5IcVEsZOLF:1AIAmUbqoLhoP
- TLSH T16EE4E115EBA810F9E277817CCD638606EA727C960770D7CF23A489562F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_1a50542727995b98f68fb27c0023bb1c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_1a50542727995b98f68fb27c0023bb1c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_1a50542727995b98f68fb27c0023bb1c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 692KB
- SHA256 2ea2bafd5b0a0a4898bc55f419ce22448e2bfc17e9b0b440234739fa90babd50
- MD5 1a50542727995b98f68fb27c0023bb1c
- SHA1 a7a16c25bfe1decf8c524de1cd69bc830a3dbf9e
- SHA512 4fdb1d2c59881e0ad470118524190230a9b498c2766ce5b2afadcda4b2820d5a19046e24ebc17b05556f84acbc7b7619ef6a144209cc2da66cadcf1faa7fce3c
- SSDEEP 12288:FNGG3U3ITEmUbqLELvxsrAXq/VU5IcVEsZOLF:1AIAmUbqoLhoP
- TLSH T16EE4E115EBA810F9E277817CCD638606EA727C960770D7CF23A489562F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.