General

  • Target
    2026-07-16_11929ddd4f4705bf365cfe65a75782b4_cobalt-strike_coinminer_icedid_mespinoza_njrat_ryuk_satacom_stealc
  • Size 9.6MB
  • Sample260716-2etchaft3j
  • SHA256 54316f2e666218a3e365afaa46c69550b9913dadd78b3614a880b9b2b1e59de0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-16_11929ddd4f4705bf365cfe65a75782b4_cobalt-strike_coinminer_icedid_mespinoza_njrat_ryuk_satacom_stealc
    • Size 9.6MB
    • SHA256 54316f2e666218a3e365afaa46c69550b9913dadd78b3614a880b9b2b1e59de0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks