General
- Target 2026-06-30_23c9cf91a51fc53fa59bd06b3e382e06_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- Sample260701-ae336act2x
- SHA256 809ccd3e524d0c1c7db3cb8aaf65691659db48559040895b27b464e3c0ca7639
- MD5 23c9cf91a51fc53fa59bd06b3e382e06
- SHA1 0fd2487c356e953f6e611ebbd84c00ec0cd98692
- SHA512 475d5320b25a74109fe8ede121105ef03aefba9c1df2cd67ce2f61098fb35b48eb4e84f0809db652730edc5fd21690103e92d79bd314126566b5fb5a0faa5d63
- SSDEEP 98304:nchQKigZ2exIzgs4wFrecjCpjdEYQyfu3E90I:nc6bgps4wFrecjCF3u3E9P
- TLSH T1DD667C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E51A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_23c9cf91a51fc53fa59bd06b3e382e06_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_23c9cf91a51fc53fa59bd06b3e382e06_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- SHA256 809ccd3e524d0c1c7db3cb8aaf65691659db48559040895b27b464e3c0ca7639
- MD5 23c9cf91a51fc53fa59bd06b3e382e06
- SHA1 0fd2487c356e953f6e611ebbd84c00ec0cd98692
- SHA512 475d5320b25a74109fe8ede121105ef03aefba9c1df2cd67ce2f61098fb35b48eb4e84f0809db652730edc5fd21690103e92d79bd314126566b5fb5a0faa5d63
- SSDEEP 98304:nchQKigZ2exIzgs4wFrecjCpjdEYQyfu3E90I:nc6bgps4wFrecjCF3u3E9P
- TLSH T1DD667C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E51A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1