General
- Target 2026-10-05_ffda422cdd75871fe951067de8f81604_cobalt-strike_icedid_njrat_satacom_stealc
- Size 608KB
- Sample261006-thnmesds6r
- SHA256 b2d31b56016629db33c13c9c7579ae654f813e46f931eba9bd420a8911dcf9f2
- MD5 ffda422cdd75871fe951067de8f81604
- SHA1 34afdf46b30c76f3938686c98d057edaa9e22be3
- SHA512 ea2fce8a531bd78ea6c8206719290399151478681be15919e904e2a67d064c49505a77b2b9d3365a484a40d03aa424f59c335b58becb87d806a090d113bfa82e
- SSDEEP 12288:mNGG3U3ITEmUbqLELwj3m9ihENEeSkbkjmss:QAIAmUbqokj3IibQwjxs
- TLSH T186D4D055FBA810F9E277813CCD634606EA727C9A0760E7CF23944A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-05_ffda422cdd75871fe951067de8f81604_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-05_ffda422cdd75871fe951067de8f81604_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-05_ffda422cdd75871fe951067de8f81604_cobalt-strike_icedid_njrat_satacom_stealc
- Size 608KB
- SHA256 b2d31b56016629db33c13c9c7579ae654f813e46f931eba9bd420a8911dcf9f2
- MD5 ffda422cdd75871fe951067de8f81604
- SHA1 34afdf46b30c76f3938686c98d057edaa9e22be3
- SHA512 ea2fce8a531bd78ea6c8206719290399151478681be15919e904e2a67d064c49505a77b2b9d3365a484a40d03aa424f59c335b58becb87d806a090d113bfa82e
- SSDEEP 12288:mNGG3U3ITEmUbqLELwj3m9ihENEeSkbkjmss:QAIAmUbqokj3IibQwjxs
- TLSH T186D4D055FBA810F9E277813CCD634606EA727C9A0760E7CF23944A962F236D19E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.