General
- Target 2026-07-24_77f2429056d8d5ed106fd199dbe5719c_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260724-lahgfawtes
- SHA256 a7a89a44c34c370dca7bc4a5cebc0b58709c2e1e6949607bb371d6d13bdcd74b
- MD5 77f2429056d8d5ed106fd199dbe5719c
- SHA1 20ba34c30a74c64b003a523e5251d0372051a3af
- SHA512 67d620c24ec3e2ef4c24967984023b8f628615eb02969b8d2bb607c17211857f22705c9bcff9c688a217724dd73eb90ef18ec8498d3a27072cda0700f9128674
- SSDEEP 49152:ylM/jZo4AkskeW2zC+xHjTetIejytxbbJjrWaB0zj0yjoB2:5bIcar4dqxbtjVB2Yyjl
- TLSH T114F57B23B1E600D8C04DD0769F4A9722A7E17C618FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_77f2429056d8d5ed106fd199dbe5719c_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_77f2429056d8d5ed106fd199dbe5719c_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 a7a89a44c34c370dca7bc4a5cebc0b58709c2e1e6949607bb371d6d13bdcd74b
- MD5 77f2429056d8d5ed106fd199dbe5719c
- SHA1 20ba34c30a74c64b003a523e5251d0372051a3af
- SHA512 67d620c24ec3e2ef4c24967984023b8f628615eb02969b8d2bb607c17211857f22705c9bcff9c688a217724dd73eb90ef18ec8498d3a27072cda0700f9128674
- SSDEEP 49152:ylM/jZo4AkskeW2zC+xHjTetIejytxbbJjrWaB0zj0yjoB2:5bIcar4dqxbtjVB2Yyjl
- TLSH T114F57B23B1E600D8C04DD0769F4A9722A7E17C618FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1