General
- Target 2026-07-10_512926dee16b76978c3de59f358aec5d_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- Sample260710-def56sdv7v
- SHA256 2f16b3504f89b1adda2e2a492ec601c61f07d01f6e83bb3d3f8da20f220efe10
- MD5 512926dee16b76978c3de59f358aec5d
- SHA1 0f5c0be9c5d07687f1fed2965de83e4f891d4809
- SHA512 468f5629419e3387e53f8346dfb8ddfd52c2ea496fa2f21899eabff2bd25e8b7318cd55d055fc802d0ec6a64da6e20238b27d802ff9d518b31c0b62f36f25e81
- SSDEEP 196608:+sN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7Mgu:+g9EC9/DNB8D2LNT/1pxu
- TLSH T16B17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_512926dee16b76978c3de59f358aec5d_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_512926dee16b76978c3de59f358aec5d_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_512926dee16b76978c3de59f358aec5d_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- SHA256 2f16b3504f89b1adda2e2a492ec601c61f07d01f6e83bb3d3f8da20f220efe10
- MD5 512926dee16b76978c3de59f358aec5d
- SHA1 0f5c0be9c5d07687f1fed2965de83e4f891d4809
- SHA512 468f5629419e3387e53f8346dfb8ddfd52c2ea496fa2f21899eabff2bd25e8b7318cd55d055fc802d0ec6a64da6e20238b27d802ff9d518b31c0b62f36f25e81
- SSDEEP 196608:+sN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7Mgu:+g9EC9/DNB8D2LNT/1pxu
- TLSH T16B17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger