General
- Target 2026-04-15_5ea71b9ce98afb4b8c7c62e9293f90c0_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.0MB
- Sample260415-mwp9vacs2j
- SHA256 0b93685e329bf0288eae9f87d9178d5d4aa5662e4951f8c75e7ab78ba9630c50
- MD5 5ea71b9ce98afb4b8c7c62e9293f90c0
- SHA1 cf9b936a88fb8671c5ef0508fe91fbf0f9a43a61
- SHA512 6549c36893a34ebb53479110a65535ffbc7ab2daac0d21ca2ac66e4d2397802d3aa20b6ca143aa3a1e4d0e60cbb5753a2f572dbbaadf92cf752c25639395e9c7
- SSDEEP 49152:1zVnZWNcDcvAHzQuNoZDnn4dbaLxK7hhak7HFygRGQjF1:1BnZuqcu2N4g+TjUHeH
- TLSH T11BE57B23B1E600E8C05DD1769F4A8332A6D17C658FB1A3DF865173061FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_5ea71b9ce98afb4b8c7c62e9293f90c0_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_5ea71b9ce98afb4b8c7c62e9293f90c0_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.0MB
- SHA256 0b93685e329bf0288eae9f87d9178d5d4aa5662e4951f8c75e7ab78ba9630c50
- MD5 5ea71b9ce98afb4b8c7c62e9293f90c0
- SHA1 cf9b936a88fb8671c5ef0508fe91fbf0f9a43a61
- SHA512 6549c36893a34ebb53479110a65535ffbc7ab2daac0d21ca2ac66e4d2397802d3aa20b6ca143aa3a1e4d0e60cbb5753a2f572dbbaadf92cf752c25639395e9c7
- SSDEEP 49152:1zVnZWNcDcvAHzQuNoZDnn4dbaLxK7hhak7HFygRGQjF1:1BnZuqcu2N4g+TjUHeH
- TLSH T11BE57B23B1E600E8C05DD1769F4A8332A6D17C658FB1A3DF865173061FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1