General
- Target 2026-07-28_41cc8940bb93ea963ae52d86a6f2df3e_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260728-l2harage63
- SHA256 c838cc66e427747e1086115b9b62017376c61344158c3cec9431ae0d182af2fc
- MD5 41cc8940bb93ea963ae52d86a6f2df3e
- SHA1 a19c32a9cfad6fffa3a430542f316c9346f0dd5e
- SHA512 27575f1d13bf3cd7161b25c1574efcbddcd5f4b1e5301322d9443393cddaed1f671036235adccc656e2268fa3265dcb6f75cffb847b0b20cdb771a535239c802
- SSDEEP 49152:WlM/jZo4AkskeW2zC+xHjTetIejytxbbJjN6aB0zj0yjoB2:FbIcar4dqxbtjTB2Yyjl
- TLSH T1C6F57B23B1E600D8C04DD0769F4A9722A7E17C618FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_41cc8940bb93ea963ae52d86a6f2df3e_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_41cc8940bb93ea963ae52d86a6f2df3e_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 c838cc66e427747e1086115b9b62017376c61344158c3cec9431ae0d182af2fc
- MD5 41cc8940bb93ea963ae52d86a6f2df3e
- SHA1 a19c32a9cfad6fffa3a430542f316c9346f0dd5e
- SHA512 27575f1d13bf3cd7161b25c1574efcbddcd5f4b1e5301322d9443393cddaed1f671036235adccc656e2268fa3265dcb6f75cffb847b0b20cdb771a535239c802
- SSDEEP 49152:WlM/jZo4AkskeW2zC+xHjTetIejytxbbJjN6aB0zj0yjoB2:FbIcar4dqxbtjTB2Yyjl
- TLSH T1C6F57B23B1E600D8C04DD0769F4A9722A7E17C618FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1