f39654341f1e1d35cecf48b715a4621b4e1b92c0e0a5896e6778d1b8d69b0aac | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-14...om.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_f8a2a8e3b301f2790c55a4d624438bf0_cobalt-strike_icedid_njrat_ryuk_satacom
Size 4.3MB
Sample260714-gevkcaey2j
SHA256 f39654341f1e1d35cecf48b715a4621b4e1b92c0e0a5896e6778d1b8d69b0aac
MD5 f8a2a8e3b301f2790c55a4d624438bf0
SHA1 2dc2ddb6f2c7814e78bd2dd89fed56dacdae0d50
SHA512 60d578e6e17c4988a03e94cad1a981748a2a70b9bb03fd691c45ed990a1d4ac1d2afabba19bc420522ac5266d86bdc666b599a93b3c42d0ddead7d2e540759b7
SSDEEP 49152:CgxhuYjJjkvIRP1GM9xzpMddlhrBozRhg4Xw+P9ztISUNd7OfzaetLNiXicJFFRI:1OQP13p4OGW5ATe7wRGpj3
TLSH
T19F266B93F36511F8C41ECCB44B2D542299687C8B4735A3EF09E876620A76ED96B3DF20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-14_f8a2a8e3b301f2790c55a4d624438bf0_cobalt-strike_icedid_njrat_ryuk_satacom.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-07-14_f8a2a8e3b301f2790c55a4d624438bf0_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.3MB
- SHA256 f39654341f1e1d35cecf48b715a4621b4e1b92c0e0a5896e6778d1b8d69b0aac
- MD5 f8a2a8e3b301f2790c55a4d624438bf0
- SHA1 2dc2ddb6f2c7814e78bd2dd89fed56dacdae0d50
- SHA512 60d578e6e17c4988a03e94cad1a981748a2a70b9bb03fd691c45ed990a1d4ac1d2afabba19bc420522ac5266d86bdc666b599a93b3c42d0ddead7d2e540759b7
- SSDEEP 49152:CgxhuYjJjkvIRP1GM9xzpMddlhrBozRhg4Xw+P9ztISUNd7OfzaetLNiXicJFFRI:1OQP13p4OGW5ATe7wRGpj3
- TLSH
  T19F266B93F36511F8C41ECCB44B2D542299687C8B4735A3EF09E876620A76ED96B3DF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy