General
- Target 2026-09-29_da1b447aeb3fb5303e90fc620816f0c4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.0MB
- Sample260930-tmha7scb89
- SHA256 140423c031cba20192d7a260ca464b301f73b168e69dd29c924ae2be1ef5d2f7
- MD5 da1b447aeb3fb5303e90fc620816f0c4
- SHA1 33979be536f128058b4114102416020ac998d58c
- SHA512 a70233c0b2c9a50d4ce3a369ad3419993c929052e2f65a32c729127e4e628a3f10a63aef62fec475968ecc5b1c435f7ffc430d1760267911b8945d159b8fd65b
- SSDEEP 24576:GAIAmUbqo1xgbF3RZ9ldaZjguGMFToqXqlP/0:G5A5uosFrlAu/0
- TLSH T13E350215E7A814F8E1A3D17CCEA34602EBB27C9A0760E6DF139445961F276E09F3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_da1b447aeb3fb5303e90fc620816f0c4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_da1b447aeb3fb5303e90fc620816f0c4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_da1b447aeb3fb5303e90fc620816f0c4_cobalt-strike_icedid_njrat_satacom_stealc
- Size 1.0MB
- SHA256 140423c031cba20192d7a260ca464b301f73b168e69dd29c924ae2be1ef5d2f7
- MD5 da1b447aeb3fb5303e90fc620816f0c4
- SHA1 33979be536f128058b4114102416020ac998d58c
- SHA512 a70233c0b2c9a50d4ce3a369ad3419993c929052e2f65a32c729127e4e628a3f10a63aef62fec475968ecc5b1c435f7ffc430d1760267911b8945d159b8fd65b
- SSDEEP 24576:GAIAmUbqo1xgbF3RZ9ldaZjguGMFToqXqlP/0:G5A5uosFrlAu/0
- TLSH T13E350215E7A814F8E1A3D17CCEA34602EBB27C9A0760E6DF139445961F276E09F3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.