General
- Target 2026-10-08_4d884167b0d756f2f560238254f4f42b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- Sample261009-spv5eaat71
- SHA256 3964bd56cd7ef24fc377810a4d80411f2d3713a91283c2a44b144da410c12b43
- MD5 4d884167b0d756f2f560238254f4f42b
- SHA1 1c60d823df6c6cafdfea3668ae9965ac9fc7301f
- SHA512 89e35efcc8626b17a3f3c84a515e867182507908e8bed2bc00b2d2f07827fb9ab15153c669df4d8db0935560772f04700264bcc7b8a7b53cbdb209f3e97f0c6b
- SSDEEP 24576:HITKwi7FVtiDXZi2NqnZc7iyi0DO4Vgob2xlhRmwH5LF0nBNdE3Ubu:o4btHCiF0a3ynBNddb
- TLSH T126C56C63161842E8C5BAD23CB5A72257F470352C0331FEFF63E09AA64E56AC0B63D756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_4d884167b0d756f2f560238254f4f42b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_4d884167b0d756f2f560238254f4f42b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_4d884167b0d756f2f560238254f4f42b_cobalt-strike_icedid_njrat_satacom_stealc
- Size 2.6MB
- SHA256 3964bd56cd7ef24fc377810a4d80411f2d3713a91283c2a44b144da410c12b43
- MD5 4d884167b0d756f2f560238254f4f42b
- SHA1 1c60d823df6c6cafdfea3668ae9965ac9fc7301f
- SHA512 89e35efcc8626b17a3f3c84a515e867182507908e8bed2bc00b2d2f07827fb9ab15153c669df4d8db0935560772f04700264bcc7b8a7b53cbdb209f3e97f0c6b
- SSDEEP 24576:HITKwi7FVtiDXZi2NqnZc7iyi0DO4Vgob2xlhRmwH5LF0nBNdE3Ubu:o4btHCiF0a3ynBNddb
- TLSH T126C56C63161842E8C5BAD23CB5A72257F470352C0331FEFF63E09AA64E56AC0B63D756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE