General
- Target 2026-07-14_67b71ddeb008df88e0cbd61088d11b4b_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- Sample260714-hlnwtaf19m
- SHA256 ded62532a11b3c5820eff08afc9c140b5d37668c8edcde0052f59e1f7db8ec11
- MD5 67b71ddeb008df88e0cbd61088d11b4b
- SHA1 c82b008b1b24290cfb42a42ae0d12cedb1db9708
- SHA512 fa525aa59fa8056a580d1ec20eb97605bee33001efe507575ff1772f45849f4dc58be8c50e8a7e853397d72d2b055b4ce640de50484ff6f241562f65124aaff0
- SSDEEP 98304:gW8oiKQtTvx8UpjxKUSWNCrN+D7wRGpj3:gW7if0aVorN+3F9
- TLSH T1D0666C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E51A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_67b71ddeb008df88e0cbd61088d11b4b_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_67b71ddeb008df88e0cbd61088d11b4b_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- SHA256 ded62532a11b3c5820eff08afc9c140b5d37668c8edcde0052f59e1f7db8ec11
- MD5 67b71ddeb008df88e0cbd61088d11b4b
- SHA1 c82b008b1b24290cfb42a42ae0d12cedb1db9708
- SHA512 fa525aa59fa8056a580d1ec20eb97605bee33001efe507575ff1772f45849f4dc58be8c50e8a7e853397d72d2b055b4ce640de50484ff6f241562f65124aaff0
- SSDEEP 98304:gW8oiKQtTvx8UpjxKUSWNCrN+D7wRGpj3:gW7if0aVorN+3F9
- TLSH T1D0666C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E51A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1