General
- Target 2026-07-16_11929ddd4f4705bf365cfe65a75782b4_cobalt-strike_coinminer_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 9.6MB
- Sample260716-2etchaft3j
- SHA256 54316f2e666218a3e365afaa46c69550b9913dadd78b3614a880b9b2b1e59de0
- MD5 11929ddd4f4705bf365cfe65a75782b4
- SHA1 2ff0aa186737aae5d539b987a96087f7e7cd371d
- SHA512 53b01bb9ae1c05240168f8b19555ded54eb31b5f0946cd4a320bcea2b6975d87ae2cc47c28a6586a172c3aa0c326116adf6b25641d315a1eac1a3db5445b3161
- SSDEEP 49152:01lONSgtBa7HeHc2eoF4lbmENAsEsLeZrWnJCpwW952qyCO1IkeSAUPOy9x4X440:Ny7HSPD25mENAsEY9Qb2FCqgHzbI
- TLSH T12EA6BDA5A24C4E6AE566B038C1974693DBF07F4B2760DEC776CC7C570BAF0D03A24629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_11929ddd4f4705bf365cfe65a75782b4_cobalt-strike_coinminer_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_11929ddd4f4705bf365cfe65a75782b4_cobalt-strike_coinminer_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_11929ddd4f4705bf365cfe65a75782b4_cobalt-strike_coinminer_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 9.6MB
- SHA256 54316f2e666218a3e365afaa46c69550b9913dadd78b3614a880b9b2b1e59de0
- MD5 11929ddd4f4705bf365cfe65a75782b4
- SHA1 2ff0aa186737aae5d539b987a96087f7e7cd371d
- SHA512 53b01bb9ae1c05240168f8b19555ded54eb31b5f0946cd4a320bcea2b6975d87ae2cc47c28a6586a172c3aa0c326116adf6b25641d315a1eac1a3db5445b3161
- SSDEEP 49152:01lONSgtBa7HeHc2eoF4lbmENAsEsLeZrWnJCpwW952qyCO1IkeSAUPOy9x4X440:Ny7HSPD25mENAsEY9Qb2FCqgHzbI
- TLSH T12EA6BDA5A24C4E6AE566B038C1974693DBF07F4B2760DEC776CC7C570BAF0D03A24629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE