General
- Target 2026-07-22_e0978312029c2b628ffb73670e169463_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260722-vd18dshf92
- SHA256 384edefc766de391a3286c263d7146fcffb459b5e70f1625369d53207a05b22f
- MD5 e0978312029c2b628ffb73670e169463
- SHA1 6aba9778b856c220d75da4643eaadc38e9b225a0
- SHA512 243e73441eb9df2360d013a7d1351de4265bb6868d9e29e2403914b81c334098cf0b598e75c99fcd13245534165a31717a7e1000b419c15ff4e5316661f960dd
- SSDEEP 49152:0lM/jZo4AkskeW2zV+xHjTetIejytxbbJj7261tySHD:HbIca44dqxbtja61tySHD
- TLSH T15BF57B23B1E600D8C04DD0769F4A9322A7E17C658FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_e0978312029c2b628ffb73670e169463_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_e0978312029c2b628ffb73670e169463_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 384edefc766de391a3286c263d7146fcffb459b5e70f1625369d53207a05b22f
- MD5 e0978312029c2b628ffb73670e169463
- SHA1 6aba9778b856c220d75da4643eaadc38e9b225a0
- SHA512 243e73441eb9df2360d013a7d1351de4265bb6868d9e29e2403914b81c334098cf0b598e75c99fcd13245534165a31717a7e1000b419c15ff4e5316661f960dd
- SSDEEP 49152:0lM/jZo4AkskeW2zV+xHjTetIejytxbbJj7261tySHD:HbIca44dqxbtja61tySHD
- TLSH T15BF57B23B1E600D8C04DD0769F4A9322A7E17C658FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1