General
- Target 2026-07-10_4c59621f3788b13ab01b409e7ace14a1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- Sample260710-dew7dsdv8w
- SHA256 609d7e1fb2a4b3cdd63da2f49e8ad792af511a2a11f80b89b72c3df1c3e92ff8
- MD5 4c59621f3788b13ab01b409e7ace14a1
- SHA1 d8cf273f0b50c78196a6bcea821879ff5ba1cea2
- SHA512 e31c22efcfa617d30dcfb87b078e30eca440653f286604e7f3663d49846625e538eb81e6f3a2b36e415944aac9be09d84cee97bb75273b1fcfdbf8aa56883e7b
- SSDEEP 196608:OsN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7MgZ:Og9EC9/DNB8D2LNT/1pxZ
- TLSH T14B17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_4c59621f3788b13ab01b409e7ace14a1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_4c59621f3788b13ab01b409e7ace14a1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_4c59621f3788b13ab01b409e7ace14a1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- SHA256 609d7e1fb2a4b3cdd63da2f49e8ad792af511a2a11f80b89b72c3df1c3e92ff8
- MD5 4c59621f3788b13ab01b409e7ace14a1
- SHA1 d8cf273f0b50c78196a6bcea821879ff5ba1cea2
- SHA512 e31c22efcfa617d30dcfb87b078e30eca440653f286604e7f3663d49846625e538eb81e6f3a2b36e415944aac9be09d84cee97bb75273b1fcfdbf8aa56883e7b
- SSDEEP 196608:OsN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7MgZ:Og9EC9/DNB8D2LNT/1pxZ
- TLSH T14B17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger