General
- Target 2026-07-19_97faa1dc2a2dc0f60bdfe2e8664fa1f1_cobalt-strike_icedid_njrat_remcos_rhadamanthys_satacom
- Size 3.3MB
- Sample260719-1p8dqsds9k
- SHA256 5ba7c81c17b5588c184bc15f9f709a2c1f8ed59c64bcfa6d32228a919edca47c
- MD5 97faa1dc2a2dc0f60bdfe2e8664fa1f1
- SHA1 9c7fd075b3395d3594a1d8543ec6e8ff08a1b74c
- SHA512 00e24f88fd084a15e6cb04066daae9334bff5d48c1f3c11fdeebcc25a8904adea2706d2e38a8c80119a4abd84378ebb50f41771331d8c06e0a2941bfdf80acee
- SSDEEP 49152:yWHddlLhUAyAhXIqGagiCy42NBsIOHcXCDbUXCgXZX4ZLDZnFaLKmMG0Z4/d:dJF+5msIOHJDvfnuKmJ
- TLSH T132F5AE45F3FE44E4D9A6D07DC5279A1BDBB1FC400631C29F01A58B5A6F332624E3A36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-19_97faa1dc2a2dc0f60bdfe2e8664fa1f1_cobalt-strike_icedid_njrat_remcos_rhadamanthys_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_97faa1dc2a2dc0f60bdfe2e8664fa1f1_cobalt-strike_icedid_njrat_remcos_rhadamanthys_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_97faa1dc2a2dc0f60bdfe2e8664fa1f1_cobalt-strike_icedid_njrat_remcos_rhadamanthys_satacom
- Size 3.3MB
- SHA256 5ba7c81c17b5588c184bc15f9f709a2c1f8ed59c64bcfa6d32228a919edca47c
- MD5 97faa1dc2a2dc0f60bdfe2e8664fa1f1
- SHA1 9c7fd075b3395d3594a1d8543ec6e8ff08a1b74c
- SHA512 00e24f88fd084a15e6cb04066daae9334bff5d48c1f3c11fdeebcc25a8904adea2706d2e38a8c80119a4abd84378ebb50f41771331d8c06e0a2941bfdf80acee
- SSDEEP 49152:yWHddlLhUAyAhXIqGagiCy42NBsIOHcXCDbUXCgXZX4ZLDZnFaLKmMG0Z4/d:dJF+5msIOHJDvfnuKmJ
- TLSH T132F5AE45F3FE44E4D9A6D07DC5279A1BDBB1FC400631C29F01A58B5A6F332624E3A36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.