General
- Target 2026-07-13_02695b534e6b185f83c8e2057b3b0654_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 17.4MB
- Sample260713-3far8aax9j
- SHA256 b06960f3578391f2a8bc0b6aa60baf69d642e271beb7ec3549f1d359685fc2c8
- MD5 02695b534e6b185f83c8e2057b3b0654
- SHA1 8804890de424ab76977df2bab3d81c49f523393f
- SHA512 191975318354cc30bc0b6bd6649b74d3177a3606ade184faa5f19c0d23f63d3ed43fda15382fed15e80bdc8894c2cd3563064157c1f822687419276dddfc7f9c
- SSDEEP 196608:xzx5/JdcBhORoHHsHiXUxO/RJk3IWhlYntjjQUO3L:xf/JgwmHMHiXUxO/RJk3IWhlYntjQ
- TLSH T195073903A2A70ED6F4FB9A7099F552639526BC496F3281DF11443F771D33AD06A38B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_02695b534e6b185f83c8e2057b3b0654_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_02695b534e6b185f83c8e2057b3b0654_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 17.4MB
- SHA256 b06960f3578391f2a8bc0b6aa60baf69d642e271beb7ec3549f1d359685fc2c8
- MD5 02695b534e6b185f83c8e2057b3b0654
- SHA1 8804890de424ab76977df2bab3d81c49f523393f
- SHA512 191975318354cc30bc0b6bd6649b74d3177a3606ade184faa5f19c0d23f63d3ed43fda15382fed15e80bdc8894c2cd3563064157c1f822687419276dddfc7f9c
- SSDEEP 196608:xzx5/JdcBhORoHHsHiXUxO/RJk3IWhlYntjjQUO3L:xf/JgwmHMHiXUxO/RJk3IWhlYntjQ
- TLSH T195073903A2A70ED6F4FB9A7099F552639526BC496F3281DF11443F771D33AD06A38B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1