General
- Target 2026-07-30_90200779286124310ccf6a9c1412132a_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260730-krrk1aef29
- SHA256 f8a2c1f296e49bb008fbac7da1e8e96a7e5c78b2bae867cc6ffd2eab6bf53a0a
- MD5 90200779286124310ccf6a9c1412132a
- SHA1 575cd619e83c15b8de003b0c98602de9fe521436
- SHA512 151407cc625f175bf815e8fbb2b9f2878dd126b2d5b5e1f9991d304dfa99e1ab6043aeab06576a05a9f56de878304c061a0c78fe52f91756282c26bad26707f5
- SSDEEP 49152:5lM/jZo4AkskeW2zC+xHjTetIejytxbbJjNcQ/lFTjN4:kbIcar4dqxbtjVLm
- TLSH T1F1F57B23B1E600D8C04DD0769F4A9322A7E17C658FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_90200779286124310ccf6a9c1412132a_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_90200779286124310ccf6a9c1412132a_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 f8a2c1f296e49bb008fbac7da1e8e96a7e5c78b2bae867cc6ffd2eab6bf53a0a
- MD5 90200779286124310ccf6a9c1412132a
- SHA1 575cd619e83c15b8de003b0c98602de9fe521436
- SHA512 151407cc625f175bf815e8fbb2b9f2878dd126b2d5b5e1f9991d304dfa99e1ab6043aeab06576a05a9f56de878304c061a0c78fe52f91756282c26bad26707f5
- SSDEEP 49152:5lM/jZo4AkskeW2zC+xHjTetIejytxbbJjNcQ/lFTjN4:kbIcar4dqxbtjVLm
- TLSH T1F1F57B23B1E600D8C04DD0769F4A9322A7E17C658FB0A3DF865173561FB6AD06B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1