General
- Target 2026-07-14_2e900aa66cb03d7c4159669490b11c80_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260714-y3grtsfx2s
- SHA256 84378ad537737afe078af9242d3b7b63c14602af4131862845d45e2fd957c4f4
- MD5 2e900aa66cb03d7c4159669490b11c80
- SHA1 fde114d846a1b9c17692469bf465084841e523f7
- SHA512 01b7fdfc62f56916c6c72c3d91294327469f04d8c56836fd98f7f58dc964ae9f0db982a394b1fd66293719024c13b5402e9b692c9bc40603dafd9f2bb8bc4502
- SSDEEP 49152:e1yBDMXmggNeKOEYUCOOyoOXaOGm2s/aIgZeQ8aB0zj0yjoB2:ZM0edgO7iVB+eQzB2Yyjl
- TLSH T14AF57B23B1E600D8C05DD0759F4A9322ABE17C618FB0A3DF865173161FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_2e900aa66cb03d7c4159669490b11c80_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_2e900aa66cb03d7c4159669490b11c80_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 84378ad537737afe078af9242d3b7b63c14602af4131862845d45e2fd957c4f4
- MD5 2e900aa66cb03d7c4159669490b11c80
- SHA1 fde114d846a1b9c17692469bf465084841e523f7
- SHA512 01b7fdfc62f56916c6c72c3d91294327469f04d8c56836fd98f7f58dc964ae9f0db982a394b1fd66293719024c13b5402e9b692c9bc40603dafd9f2bb8bc4502
- SSDEEP 49152:e1yBDMXmggNeKOEYUCOOyoOXaOGm2s/aIgZeQ8aB0zj0yjoB2:ZM0edgO7iVB+eQzB2Yyjl
- TLSH T14AF57B23B1E600D8C05DD0759F4A9322ABE17C618FB0A3DF865173161FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1