General
- Target 2026-05-16_049290bc198c78393424c6f9d7939181_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- Sample260516-2rfbeah16s
- SHA256 ff45df3f5d5ddc95774c5043d7966f614dac74e42d31bececbc839046d3bdfc4
- MD5 049290bc198c78393424c6f9d7939181
- SHA1 f3932e8d3da0d4516b43a3301b2d560dcdfc0fa2
- SHA512 f7fa33d065f6c3ab520a6554762359305e1102900f2d87fd201422104d140a3ba4d1d962567b18c2afb41a04aef9b5e774c8798f6736e7807c50fc55670a84b2
- SSDEEP 196608:+sN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7Mgg:+g9EC9/DNB8D2LNT/1pxg
- TLSH T1B417AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-16_049290bc198c78393424c6f9d7939181_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_049290bc198c78393424c6f9d7939181_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_049290bc198c78393424c6f9d7939181_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- SHA256 ff45df3f5d5ddc95774c5043d7966f614dac74e42d31bececbc839046d3bdfc4
- MD5 049290bc198c78393424c6f9d7939181
- SHA1 f3932e8d3da0d4516b43a3301b2d560dcdfc0fa2
- SHA512 f7fa33d065f6c3ab520a6554762359305e1102900f2d87fd201422104d140a3ba4d1d962567b18c2afb41a04aef9b5e774c8798f6736e7807c50fc55670a84b2
- SSDEEP 196608:+sN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7Mgg:+g9EC9/DNB8D2LNT/1pxg
- TLSH T1B417AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger