General
- Target 2026-07-09_9d25d96b5f693eebaee6696a4fdaa2e5_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- Sample260709-cfkpbacw5s
- SHA256 2a7970e61f1a26f364e1d6b81949a6fa1473b87dfb336ef8db7cf7e6240e6e3c
- MD5 9d25d96b5f693eebaee6696a4fdaa2e5
- SHA1 6133a33dfde97bff59d5d66a82143434b18ec9ed
- SHA512 928863f5fe4dd5fb6a0cc02d21c4d8c1fba3542a4404097b18017ffadab6c81ef3a362869014a8be01f4b5c3ca649bb8da2bb932c3718c19b38ba8a51ec7ab71
- SSDEEP 49152:r5XTB/WFhIy+/gUO7z4xkzqudzjSDoSoSwL8veZ2JYpsvTBaQJOOqMzz6W0mS61M:bY76o+utSaRiZEYq23AbDmwJVV7
- TLSH T1EA666C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E51A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_9d25d96b5f693eebaee6696a4fdaa2e5_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_9d25d96b5f693eebaee6696a4fdaa2e5_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- SHA256 2a7970e61f1a26f364e1d6b81949a6fa1473b87dfb336ef8db7cf7e6240e6e3c
- MD5 9d25d96b5f693eebaee6696a4fdaa2e5
- SHA1 6133a33dfde97bff59d5d66a82143434b18ec9ed
- SHA512 928863f5fe4dd5fb6a0cc02d21c4d8c1fba3542a4404097b18017ffadab6c81ef3a362869014a8be01f4b5c3ca649bb8da2bb932c3718c19b38ba8a51ec7ab71
- SSDEEP 49152:r5XTB/WFhIy+/gUO7z4xkzqudzjSDoSoSwL8veZ2JYpsvTBaQJOOqMzz6W0mS61M:bY76o+utSaRiZEYq23AbDmwJVV7
- TLSH T1EA666C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E51A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1