General
- Target 2026-09-30_4d818a6cb98df6e15dd7326ccb1f1c3b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 268KB
- Sample260930-nra5ssec47
- SHA256 01222b215c3994f20184cbe4dab7c6852df12ca78f61876e3a20f63cc6d83123
- MD5 4d818a6cb98df6e15dd7326ccb1f1c3b
- SHA1 ead8a1308056ae94b2a2580a72215b3aff3c9178
- SHA512 90ed2f6c0aacc47ef61fa80752deab31028a9dd7ac9bc6c07c9c3fc1bc6b4e7e996bb3bee7da4faf9737a13c120d143347bf81aa24cdb1630ed0365c395d8c37
- SSDEEP 6144:83FxUJ5jZXh6KNvP7vCd+XK8GWeQnrQU:8cJ5ZxxrCd+68Gor
- TLSH T14A447D15B7A10DFAEA77857DC953D502EA727C060760EADB03A04DA61F236D09E3FB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-30_4d818a6cb98df6e15dd7326ccb1f1c3b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_4d818a6cb98df6e15dd7326ccb1f1c3b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_4d818a6cb98df6e15dd7326ccb1f1c3b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 268KB
- SHA256 01222b215c3994f20184cbe4dab7c6852df12ca78f61876e3a20f63cc6d83123
- MD5 4d818a6cb98df6e15dd7326ccb1f1c3b
- SHA1 ead8a1308056ae94b2a2580a72215b3aff3c9178
- SHA512 90ed2f6c0aacc47ef61fa80752deab31028a9dd7ac9bc6c07c9c3fc1bc6b4e7e996bb3bee7da4faf9737a13c120d143347bf81aa24cdb1630ed0365c395d8c37
- SSDEEP 6144:83FxUJ5jZXh6KNvP7vCd+XK8GWeQnrQU:8cJ5ZxxrCd+68Gor
- TLSH T14A447D15B7A10DFAEA77857DC953D502EA727C060760EADB03A04DA61F236D09E3FB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.