General
- Target 2026-07-19_25f5835f1b919576282d0161d2f77ea2_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.7MB
- Sample260719-3blc6afv9m
- SHA256 4cbdc6a1bb8f0bf347f9e1fcc347e2a64a78756cc02d2d4dc2ff0e541abd6993
- MD5 25f5835f1b919576282d0161d2f77ea2
- SHA1 7b2976d8320069a0770e7bb55567a18dcbb80c8e
- SHA512 fa3cbf7806685b6685f68a5e343fd187189c9986aa64243bcada055239dc908c6acf245947ac94f0d4f93de4796fadfaf0fc2d1ed067457924f337895d0cdeed
- SSDEEP 196608:YPxAsDZG8xoi+BFAZJMyiekAuUD50q5e8tjFSfNjH/1dhVn7Mu:4CsoSz+BFAq9V8Cq88tjmNT/1pz
- TLSH T17A17AF43F6EA50ECD076C57097765223AA327C861F3499EF0190862D2E75FE06E39B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_25f5835f1b919576282d0161d2f77ea2_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_25f5835f1b919576282d0161d2f77ea2_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_25f5835f1b919576282d0161d2f77ea2_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.7MB
- SHA256 4cbdc6a1bb8f0bf347f9e1fcc347e2a64a78756cc02d2d4dc2ff0e541abd6993
- MD5 25f5835f1b919576282d0161d2f77ea2
- SHA1 7b2976d8320069a0770e7bb55567a18dcbb80c8e
- SHA512 fa3cbf7806685b6685f68a5e343fd187189c9986aa64243bcada055239dc908c6acf245947ac94f0d4f93de4796fadfaf0fc2d1ed067457924f337895d0cdeed
- SSDEEP 196608:YPxAsDZG8xoi+BFAZJMyiekAuUD50q5e8tjFSfNjH/1dhVn7Mu:4CsoSz+BFAq9V8Cq88tjmNT/1pz
- TLSH T17A17AF43F6EA50ECD076C57097765223AA327C861F3499EF0190862D2E75FE06E39B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger