General
- Target 2026-10-26_9608194289a7859347ceb06a72532927_cobalt-strike_icedid_njrat_satacom
- Size 2.2MB
- Sample261027-nkh7tstvbv
- SHA256 658a4b4a4dc3b5c4f4f60db15927a9accea224fb8fdbff85a6bac403e48591aa
- MD5 9608194289a7859347ceb06a72532927
- SHA1 c62b71a2cce85e727e3d0d383d23faafc95262da
- SHA512 7628ff5396325c780cbc280f44ec29a3e8d4d6468c903d1d733edd1b7742c1229005a70d7b30c140804673cb0760236dd5368d806678868054cd5679c029a01b
- SSDEEP 49152:ZKagaeoBzaXmlffKnSDWL6xyqUe/FqVHQxmAevlDhXwu:ZKagalrlf2vL6Mk8VMmbr
- TLSH T1BBA5E056A3A800F8D077C274CA565607EBB2F806273497CF53948D5A6F23BB25E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_9608194289a7859347ceb06a72532927_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_9608194289a7859347ceb06a72532927_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_9608194289a7859347ceb06a72532927_cobalt-strike_icedid_njrat_satacom
- Size 2.2MB
- SHA256 658a4b4a4dc3b5c4f4f60db15927a9accea224fb8fdbff85a6bac403e48591aa
- MD5 9608194289a7859347ceb06a72532927
- SHA1 c62b71a2cce85e727e3d0d383d23faafc95262da
- SHA512 7628ff5396325c780cbc280f44ec29a3e8d4d6468c903d1d733edd1b7742c1229005a70d7b30c140804673cb0760236dd5368d806678868054cd5679c029a01b
- SSDEEP 49152:ZKagaeoBzaXmlffKnSDWL6xyqUe/FqVHQxmAevlDhXwu:ZKagalrlf2vL6Mk8VMmbr
- TLSH T1BBA5E056A3A800F8D077C274CA565607EBB2F806273497CF53948D5A6F23BB25E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.