General
- Target 2026-09-29_94d169f00ce04b501cba4942aca32af0_cobalt-strike_icedid_njrat_satacom_stealc
- Size 834KB
- Sample260930-w238bsvx4j
- SHA256 e1e8bd8c74f3e92b128b1f04c93eea3823296893af51d11e1e24a463e39d6f98
- MD5 94d169f00ce04b501cba4942aca32af0
- SHA1 f2590249974ef9e42af44d259d4f64a5024593ac
- SHA512 8c05897518d83d70e21ba1afd9822d9307c32278ac357d8524afd913df1519da519e0351ee4eb51a873dbac8850e536399bc476e8adbbd6b545e9eaa1042ccdc
- SSDEEP 24576:eAIAmUbqo6IRF+r5m7i4FS7T4z4+dszkp4zj7:e5A5uob+r5+hryW4zj7
- TLSH T1E405F115FBA814F9E173817CC9634506EA727C5A0770EBCF13A886A62F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_94d169f00ce04b501cba4942aca32af0_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_94d169f00ce04b501cba4942aca32af0_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_94d169f00ce04b501cba4942aca32af0_cobalt-strike_icedid_njrat_satacom_stealc
- Size 834KB
- SHA256 e1e8bd8c74f3e92b128b1f04c93eea3823296893af51d11e1e24a463e39d6f98
- MD5 94d169f00ce04b501cba4942aca32af0
- SHA1 f2590249974ef9e42af44d259d4f64a5024593ac
- SHA512 8c05897518d83d70e21ba1afd9822d9307c32278ac357d8524afd913df1519da519e0351ee4eb51a873dbac8850e536399bc476e8adbbd6b545e9eaa1042ccdc
- SSDEEP 24576:eAIAmUbqo6IRF+r5m7i4FS7T4z4+dszkp4zj7:e5A5uob+r5+hryW4zj7
- TLSH T1E405F115FBA814F9E173817CC9634506EA727C5A0770EBCF13A886A62F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.