General
- Target 2026-07-18_281dea8cca0b23ad0d637b1455f7ae0f_cobalt-strike_icedid_njrat_ryuk_satacom_stealc
- Size 3.0MB
- Sample260718-nttd6aas6k
- SHA256 2eae7c742f4eb93b66309386574c1f46cbf7dc23a8044a890025bea427a43fab
- MD5 281dea8cca0b23ad0d637b1455f7ae0f
- SHA1 3a3191038ec4ec930678bfb283cca79fe3b63aac
- SHA512 1a306ed1977e5b0d336f9a259fa8b832c54fb9d20f91e0f5ead0089bafe341b28d136661d0ce0f2ba0ea0b01de51ef25a9d244fe63ed9f9f161cf77437bdca1a
- SSDEEP 98304:Q3R/3cnldhVAd6MXN66aSPg9AnVzNMzv8d:SJcnldPAoMXNHa2VpM
- TLSH T11AE5AF12B55B3498C11BC87186426AE37F2034CA4BE2EEEB659CD53A2F35BF40A3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_281dea8cca0b23ad0d637b1455f7ae0f_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_281dea8cca0b23ad0d637b1455f7ae0f_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_281dea8cca0b23ad0d637b1455f7ae0f_cobalt-strike_icedid_njrat_ryuk_satacom_stealc
- Size 3.0MB
- SHA256 2eae7c742f4eb93b66309386574c1f46cbf7dc23a8044a890025bea427a43fab
- MD5 281dea8cca0b23ad0d637b1455f7ae0f
- SHA1 3a3191038ec4ec930678bfb283cca79fe3b63aac
- SHA512 1a306ed1977e5b0d336f9a259fa8b832c54fb9d20f91e0f5ead0089bafe341b28d136661d0ce0f2ba0ea0b01de51ef25a9d244fe63ed9f9f161cf77437bdca1a
- SSDEEP 98304:Q3R/3cnldhVAd6MXN66aSPg9AnVzNMzv8d:SJcnldPAoMXNHa2VpM
- TLSH T11AE5AF12B55B3498C11BC87186426AE37F2034CA4BE2EEEB659CD53A2F35BF40A3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger