2f627bb30e435e6c9e7a7aafd33df564a29733472ad5d798af78038f8f601336 | Triage™

Login
Reports

Overview

overview

Static

static

2026-07-02...lc.exe

windows10-2004-x64

9

2026-07-02...lc.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-02_b2189eb8b22ed51f9d25295b56564bb3_cobalt-strike_icedid_njrat_satacom_stealc
Size 339KB
Sample260702-3rm7pads6l
SHA256 2f627bb30e435e6c9e7a7aafd33df564a29733472ad5d798af78038f8f601336
MD5 b2189eb8b22ed51f9d25295b56564bb3
SHA1 6d71bd9fa727443e31924a598b6ea1dbacde19d4
SHA512 13a3c1c8eeca1a288e68cf5d9cb4c836d4af050a5f297997bc1efc3aafc5418233a2cb2371a6fbf8b71ab762795c36617566458350b878940e0d447b8f26f0a6
SSDEEP 6144:7ITn3yCudguXKVT9eth2oz28eAkRL7tCmZOD:sAKuXKVIh2/xRL7tC1
TLSH
T191748E59F7A414F9E267C17CC9524506EBB2BC164761EBCF23A00A963F236E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion execution impact ransomware trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2026-07-02_b2189eb8b22ed51f9d25295b56564bb3_cobalt-strike_icedid_njrat_satacom_stealc.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion execution impact ransomware trojan

Behavioral task

behavioral2

Sample

2026-07-02_b2189eb8b22ed51f9d25295b56564bb3_cobalt-strike_icedid_njrat_satacom_stealc.exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion execution impact ransomware

Malware Config

Targets

- Target
  2026-07-02_b2189eb8b22ed51f9d25295b56564bb3_cobalt-strike_icedid_njrat_satacom_stealc
- Size 339KB
- SHA256 2f627bb30e435e6c9e7a7aafd33df564a29733472ad5d798af78038f8f601336
- MD5 b2189eb8b22ed51f9d25295b56564bb3
- SHA1 6d71bd9fa727443e31924a598b6ea1dbacde19d4
- SHA512 13a3c1c8eeca1a288e68cf5d9cb4c836d4af050a5f297997bc1efc3aafc5418233a2cb2371a6fbf8b71ab762795c36617566458350b878940e0d447b8f26f0a6
- SSDEEP 6144:7ITn3yCudguXKVT9eth2oz28eAkRL7tCmZOD:sAKuXKVIh2/xRL7tC1
- TLSH
  T191748E59F7A414F9E267C17CC9524506EBB2BC164761EBCF23A00A963F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion execution impact ransomware trojan
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Windows security modification
  defense_evasion trojan
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Impair Defenses

Disable or Modify Tools

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasionexecutionimpactransomwaretrojan

behavioral2

defense_evasionexecutionimpactransomware

© 2018-2026

Terms | Privacy