General
- Target 2026-07-09_e75d88e86fcd44bdd7c49ef5755c458c_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.3MB
- Sample260709-b68cmabv3r
- SHA256 2f7619780a303f58d0a0bb55d4d3950165bc019dde0e3f7b9e824c22555307b4
- MD5 e75d88e86fcd44bdd7c49ef5755c458c
- SHA1 d781eb694757d5777dadffc2c4387a94f65f027d
- SHA512 46876d6a2cc6a0a082d7443884f5885d4a378db8c16d182284ab47a56fd533a694577a2fda93b499cdcfe29c76241f803b9a68968fe42233014dca75bb72be98
- SSDEEP 49152:wx9CWYCA3syNwkx0Ss6YsD298n7Yd0V73bbTytnHWXGWaJj4MYPVyGLr:IYhx0YpUEjDkpSV3
- TLSH T196265B97F36501F8C41ECCB44B6D542299287C8B4731A3EF09E876621A76ED96B3DF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_e75d88e86fcd44bdd7c49ef5755c458c_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_e75d88e86fcd44bdd7c49ef5755c458c_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.3MB
- SHA256 2f7619780a303f58d0a0bb55d4d3950165bc019dde0e3f7b9e824c22555307b4
- MD5 e75d88e86fcd44bdd7c49ef5755c458c
- SHA1 d781eb694757d5777dadffc2c4387a94f65f027d
- SHA512 46876d6a2cc6a0a082d7443884f5885d4a378db8c16d182284ab47a56fd533a694577a2fda93b499cdcfe29c76241f803b9a68968fe42233014dca75bb72be98
- SSDEEP 49152:wx9CWYCA3syNwkx0Ss6YsD298n7Yd0V73bbTytnHWXGWaJj4MYPVyGLr:IYhx0YpUEjDkpSV3
- TLSH T196265B97F36501F8C41ECCB44B6D542299287C8B4731A3EF09E876621A76ED96B3DF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1