General
- Target 2026-05-29_aaa85c411dc63e6b24c16d22fbe08adc_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260529-w5lsfsey9r
- SHA256 836a501bc7ad7027dc061529e15af69469be512fad93821fcc324f559dbeecd3
- MD5 aaa85c411dc63e6b24c16d22fbe08adc
- SHA1 958efe8dd73ca8ddc66f8d4deaca835b0cb7a7dd
- SHA512 d997613a389bea210e1a7623aa2f8a81c3ae1ea2b8187abd716afa008fa09a7d6da868bed604167d7a3fe5357b30eefa18a3aad64e908b07c6bff7ab124e566c
- SSDEEP 49152:YSgFOSOHDNb/Wg3aVZu5VnDnYpM9jklXK5/OFuSlDEYXgmB8t/5RNJON:bgFzWmcVZtYK5GFuev8t/zLO
- TLSH T167F57B33B1E600D8C05DD0799B4A9332A7D1BC658FB0A3DF865072161FB6AD46B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_aaa85c411dc63e6b24c16d22fbe08adc_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_aaa85c411dc63e6b24c16d22fbe08adc_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 836a501bc7ad7027dc061529e15af69469be512fad93821fcc324f559dbeecd3
- MD5 aaa85c411dc63e6b24c16d22fbe08adc
- SHA1 958efe8dd73ca8ddc66f8d4deaca835b0cb7a7dd
- SHA512 d997613a389bea210e1a7623aa2f8a81c3ae1ea2b8187abd716afa008fa09a7d6da868bed604167d7a3fe5357b30eefa18a3aad64e908b07c6bff7ab124e566c
- SSDEEP 49152:YSgFOSOHDNb/Wg3aVZu5VnDnYpM9jklXK5/OFuSlDEYXgmB8t/5RNJON:bgFzWmcVZtYK5GFuev8t/zLO
- TLSH T167F57B33B1E600D8C05DD0799B4A9332A7D1BC658FB0A3DF865072161FB6AD46B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1