General
- Target 2026-07-06_ce2e9c299acb7ffa33fd7b4ca4237db1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- Sample260707-a7mlwaex9v
- SHA256 0f5382b1628a9ada542ed8a60161e473331c8e1c9abfd231133745adfc40c8bb
- MD5 ce2e9c299acb7ffa33fd7b4ca4237db1
- SHA1 a6f696cb80d139820fb29f20644c962a85ea46ca
- SHA512 6e71fb5fca597d6e7620670c027afb43035da019adfc989b9e59bb4c99e7793d52198c7cd4ecb1eb79cb50f9895122e4517a0eed5d39960025d144a311a7ec84
- SSDEEP 196608:usN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7MgP:ug9EC9/DNB8D2LNT/1pxP
- TLSH T14F17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ce2e9c299acb7ffa33fd7b4ca4237db1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ce2e9c299acb7ffa33fd7b4ca4237db1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260706-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ce2e9c299acb7ffa33fd7b4ca4237db1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- SHA256 0f5382b1628a9ada542ed8a60161e473331c8e1c9abfd231133745adfc40c8bb
- MD5 ce2e9c299acb7ffa33fd7b4ca4237db1
- SHA1 a6f696cb80d139820fb29f20644c962a85ea46ca
- SHA512 6e71fb5fca597d6e7620670c027afb43035da019adfc989b9e59bb4c99e7793d52198c7cd4ecb1eb79cb50f9895122e4517a0eed5d39960025d144a311a7ec84
- SSDEEP 196608:usN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7MgP:ug9EC9/DNB8D2LNT/1pxP
- TLSH T14F17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger