General
- Target 2026-09-29_0815b0b58eadad5da2ad12bf78a476a8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 876KB
- Sample260930-gmbr7sysaz
- SHA256 cbc92a26a45c718671a261011df057d7d239995bfa3d4ec8e3f984ffe062f04c
- MD5 0815b0b58eadad5da2ad12bf78a476a8
- SHA1 3b35aaffa0f2f37d4dd51a638cd04ffb61292ba3
- SHA512 64a1df0f428f51e125f8cda42727ec5d7480913c0d6ef2b8a7c6babb8beb889cf8bf4138cc61d60eaa3e512dba7f4a134f3c2536c594055bcca39496c707797a
- SSDEEP 24576:sAIAmUbqow18UAZjkqr6PKR6NgMApJTzf5:s5A5uoAC1kqyU6NgnpJTzf5
- TLSH T1A915F159FBA810F9E2738178CD734606EA717C5A0760A7CF13A489562F23AD1DE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_0815b0b58eadad5da2ad12bf78a476a8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_0815b0b58eadad5da2ad12bf78a476a8_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_0815b0b58eadad5da2ad12bf78a476a8_cobalt-strike_icedid_njrat_satacom_stealc
- Size 876KB
- SHA256 cbc92a26a45c718671a261011df057d7d239995bfa3d4ec8e3f984ffe062f04c
- MD5 0815b0b58eadad5da2ad12bf78a476a8
- SHA1 3b35aaffa0f2f37d4dd51a638cd04ffb61292ba3
- SHA512 64a1df0f428f51e125f8cda42727ec5d7480913c0d6ef2b8a7c6babb8beb889cf8bf4138cc61d60eaa3e512dba7f4a134f3c2536c594055bcca39496c707797a
- SSDEEP 24576:sAIAmUbqow18UAZjkqr6PKR6NgMApJTzf5:s5A5uoAC1kqyU6NgnpJTzf5
- TLSH T1A915F159FBA810F9E2738178CD734606EA717C5A0760A7CF13A489562F23AD1DE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.