General
- Target 2026-07-17_a6428b69dc7ede3c89f91b609fece6e1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- Sample260717-1hta8sev8p
- SHA256 093648968c9d6f6f31e8cc31fe5c6d130e994c9382677db36cead6bd58ddd9a4
- MD5 a6428b69dc7ede3c89f91b609fece6e1
- SHA1 ca6ca578310fc8dc6e20c37c063e839b8c9cb846
- SHA512 dc743288d7947677c585c030ad24d1753b3000f5aa7a35b4b54a5e3d197215e7c766c36e8b11cde96801a8fba4a672e497bb2983913aee9f4c1a5392c3d6582c
- SSDEEP 196608:OsN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7Mgd:Og9EC9/DNB8D2LNT/1pxd
- TLSH T1A017AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_a6428b69dc7ede3c89f91b609fece6e1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_a6428b69dc7ede3c89f91b609fece6e1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_a6428b69dc7ede3c89f91b609fece6e1_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- SHA256 093648968c9d6f6f31e8cc31fe5c6d130e994c9382677db36cead6bd58ddd9a4
- MD5 a6428b69dc7ede3c89f91b609fece6e1
- SHA1 ca6ca578310fc8dc6e20c37c063e839b8c9cb846
- SHA512 dc743288d7947677c585c030ad24d1753b3000f5aa7a35b4b54a5e3d197215e7c766c36e8b11cde96801a8fba4a672e497bb2983913aee9f4c1a5392c3d6582c
- SSDEEP 196608:OsN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7Mgd:Og9EC9/DNB8D2LNT/1pxd
- TLSH T1A017AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger