General
- Target 2026-07-17_221fe1134929c2a00532bf61658a28a1_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260717-rab8bacw7k
- SHA256 ba24370e722d41c75e768058ec0939d210cadbc87c2a4bd7c7c4b2308b559266
- MD5 221fe1134929c2a00532bf61658a28a1
- SHA1 42a841b50da48095df8e8dd4cc3fb936aa8af93f
- SHA512 fadf73f1f7323781355f013c31d40097ea8abc496351f7267ee18f546c9ad5ccd8cdae8f3d55d1dcd02a758b2a27ded8459b34237869464ccd11bc1217e8bb92
- SSDEEP 49152:d1yBDMXmggNeKOEYUCOOyoOXaOGm2s/aIgZeQrQ/lFTjN4:MM0edgO7iVB+eQgLm
- TLSH T195F57B23B1E601D8C05DD0769F4A9332ABE17C618FB0A3DF465172161FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_221fe1134929c2a00532bf61658a28a1_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_221fe1134929c2a00532bf61658a28a1_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 ba24370e722d41c75e768058ec0939d210cadbc87c2a4bd7c7c4b2308b559266
- MD5 221fe1134929c2a00532bf61658a28a1
- SHA1 42a841b50da48095df8e8dd4cc3fb936aa8af93f
- SHA512 fadf73f1f7323781355f013c31d40097ea8abc496351f7267ee18f546c9ad5ccd8cdae8f3d55d1dcd02a758b2a27ded8459b34237869464ccd11bc1217e8bb92
- SSDEEP 49152:d1yBDMXmggNeKOEYUCOOyoOXaOGm2s/aIgZeQrQ/lFTjN4:MM0edgO7iVB+eQgLm
- TLSH T195F57B23B1E601D8C05DD0769F4A9332ABE17C618FB0A3DF465172161FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1