General
- Target 2026-09-30_5fcb34ce7951ef919b34451446ccd633_cobalt-strike_icedid_njrat_satacom_stealc
- Size 38.0MB
- Sample261001-qs5rxach28
- SHA256 6bcd8520a5cfc8ff4cb3d918d27609c0b01332a9480946e2dc23f5db559c440d
- MD5 5fcb34ce7951ef919b34451446ccd633
- SHA1 f118242d011ff00c3308113653ae4fb160bf93d7
- SHA512 0af01de20a757097aa0fbdf9aa77f56e1d8a46d8f1698bddfe7e7e5afd42e6d929d7e3faf696c75c3aa3b8793556b36e860bc6be6ab7b3805bff03b653a61d33
- SSDEEP 786432:ZlSOPAc6VT4Cebe4TJ7+K5Oa/s3jdNOgPWJA8qPk/rn/:Z8Bke497+G/wnPD2D
- TLSH T19697233E151043ECD96DC63D949F21E9B0A0362C53386FBFB1D05E210EB69947BB968B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_5fcb34ce7951ef919b34451446ccd633_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_5fcb34ce7951ef919b34451446ccd633_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_5fcb34ce7951ef919b34451446ccd633_cobalt-strike_icedid_njrat_satacom_stealc
- Size 38.0MB
- SHA256 6bcd8520a5cfc8ff4cb3d918d27609c0b01332a9480946e2dc23f5db559c440d
- MD5 5fcb34ce7951ef919b34451446ccd633
- SHA1 f118242d011ff00c3308113653ae4fb160bf93d7
- SHA512 0af01de20a757097aa0fbdf9aa77f56e1d8a46d8f1698bddfe7e7e5afd42e6d929d7e3faf696c75c3aa3b8793556b36e860bc6be6ab7b3805bff03b653a61d33
- SSDEEP 786432:ZlSOPAc6VT4Cebe4TJ7+K5Oa/s3jdNOgPWJA8qPk/rn/:Z8Bke497+G/wnPD2D
- TLSH T19697233E151043ECD96DC63D949F21E9B0A0362C53386FBFB1D05E210EB69947BB968B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE