General
- Target 2026-07-01_25acb3ff9149a0da94ce18e20c32a1e0_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260701-pcwnmadv8p
- SHA256 5854e1ed89a736e0bc1ff002b918fe81b0258e815d3c008f7f6bbb44708d848f
- MD5 25acb3ff9149a0da94ce18e20c32a1e0
- SHA1 71b81aa7a1d4d8484f2da43c1b7759159bc85e76
- SHA512 eef5984e864ea10d11b449ab7a4a589ae43e91a7b7f023f87bcd245058b6a1cd4f9e31da1b23571c0cbc28b075bdeb8792e4f5729f0524a3cebfd30e80f92acf
- SSDEEP 49152:FqC2KNdfeK8ZuI8tZKd94QERWDqbgAPJ1Dv81qP5jAxjVTt:grW4WJWWFb01i5jE/
- TLSH T150F57B33B1E600D8C05DD0769B4A9332A7E1BC618FB1A3DF465172161FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_25acb3ff9149a0da94ce18e20c32a1e0_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_25acb3ff9149a0da94ce18e20c32a1e0_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 5854e1ed89a736e0bc1ff002b918fe81b0258e815d3c008f7f6bbb44708d848f
- MD5 25acb3ff9149a0da94ce18e20c32a1e0
- SHA1 71b81aa7a1d4d8484f2da43c1b7759159bc85e76
- SHA512 eef5984e864ea10d11b449ab7a4a589ae43e91a7b7f023f87bcd245058b6a1cd4f9e31da1b23571c0cbc28b075bdeb8792e4f5729f0524a3cebfd30e80f92acf
- SSDEEP 49152:FqC2KNdfeK8ZuI8tZKd94QERWDqbgAPJ1Dv81qP5jAxjVTt:grW4WJWWFb01i5jE/
- TLSH T150F57B33B1E600D8C05DD0769B4A9332A7E1BC618FB1A3DF465172161FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1