General
- Target 2026-07-21_d6c71c120b1202c1ceb558f9a31d12eb_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.1MB
- Sample260721-t26mcaep41
- SHA256 5753c90ffe85c118e0ca2e7fe03058d6d285e815adfa03295fbc34aedc13fabc
- MD5 d6c71c120b1202c1ceb558f9a31d12eb
- SHA1 bf267d49e0aa36639eee538eaf15353af442d19b
- SHA512 199f6f88f844a4ede0ddaef3a7318c5f018893edbe8262813ffc03c3ebcceff4312d968a9a726d73988aa17a393031854f81558847d5d0d082c0843b6ffe2721
- SSDEEP 49152:ekUroZabdjF6Cc655qzoZLIbqvKY5fjiUjGxYIUFZpToD1XKVIHhnIzfU1IZmjmM:5uu6sI2qVF4yu+tcNWtCLYF22g3
- TLSH T145567C53F3A501E8D05EC974CF2D91229A257C4A4BB1A3EF2AD436E51A71ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_d6c71c120b1202c1ceb558f9a31d12eb_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_d6c71c120b1202c1ceb558f9a31d12eb_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.1MB
- SHA256 5753c90ffe85c118e0ca2e7fe03058d6d285e815adfa03295fbc34aedc13fabc
- MD5 d6c71c120b1202c1ceb558f9a31d12eb
- SHA1 bf267d49e0aa36639eee538eaf15353af442d19b
- SHA512 199f6f88f844a4ede0ddaef3a7318c5f018893edbe8262813ffc03c3ebcceff4312d968a9a726d73988aa17a393031854f81558847d5d0d082c0843b6ffe2721
- SSDEEP 49152:ekUroZabdjF6Cc655qzoZLIbqvKY5fjiUjGxYIUFZpToD1XKVIHhnIzfU1IZmjmM:5uu6sI2qVF4yu+tcNWtCLYF22g3
- TLSH T145567C53F3A501E8D05EC974CF2D91229A257C4A4BB1A3EF2AD436E51A71ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1