General
- Target 2026-07-19_43e21df6b9a0c0392b6a03f71f3f7148_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- Sample260719-2tw2yaex9k
- SHA256 ba01a3537f7d4f50fe7dc66161ba190976c423c78c3dce16bd5ed7e494dbc92a
- MD5 43e21df6b9a0c0392b6a03f71f3f7148
- SHA1 b83ef5d7a2188ac052f29bc3b236142ab5c6925b
- SHA512 dffde9a944bb9421451187de9086d0165245c969df0d0859090d3cbf05221ad6b2029633125d67086bbfb7eae768920529afcdae8afc9ddf60ab198bfdd7dfa9
- SSDEEP 196608:usN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7MgB:ug9EC9/DNB8D2LNT/1pxB
- TLSH T15F17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_43e21df6b9a0c0392b6a03f71f3f7148_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_43e21df6b9a0c0392b6a03f71f3f7148_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_43e21df6b9a0c0392b6a03f71f3f7148_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.4MB
- SHA256 ba01a3537f7d4f50fe7dc66161ba190976c423c78c3dce16bd5ed7e494dbc92a
- MD5 43e21df6b9a0c0392b6a03f71f3f7148
- SHA1 b83ef5d7a2188ac052f29bc3b236142ab5c6925b
- SHA512 dffde9a944bb9421451187de9086d0165245c969df0d0859090d3cbf05221ad6b2029633125d67086bbfb7eae768920529afcdae8afc9ddf60ab198bfdd7dfa9
- SSDEEP 196608:usN9E+bGUJ/DNB4na7FWJbWhdUGNLNjH/1dhVn7MgB:ug9EC9/DNB8D2LNT/1pxB
- TLSH T15F17AE43F7F650ECE176C57097765262EA32BC851F3499EF024096292E71BD0AE39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger