General
- Target 2026-07-31_862d7b8d25d93af6f5b3bbb47ae4a117_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260731-ezfktace86
- SHA256 1a23153f3c86d5ad586ce454ccf966d493ef5690456d784cad3fcb6220149d13
- MD5 862d7b8d25d93af6f5b3bbb47ae4a117
- SHA1 e878974e50ed8c281f6e78b0b5fc39fdb2f8c424
- SHA512 94f829478985f438247efa77b3826e370a89b5ceaecc1b0c5fdcb1e1e820a6982a76baa6cb0d74d8a710edd1202ec30eeb60e391158319913a213bea81851c59
- SSDEEP 49152:mlIKCZ4eKE0Ff2JiCzBRAfl6zJPBiLRlfEyUu+Zq9SASScpfB5X:pKvPEKuzKO4nEyD+A9SVN55
- TLSH T1A9F55A23B19AD0D4C00DD074CF165BB2A6617C69CBE5A7DF06C87E217B359E07ABA318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_862d7b8d25d93af6f5b3bbb47ae4a117_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_862d7b8d25d93af6f5b3bbb47ae4a117_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 1a23153f3c86d5ad586ce454ccf966d493ef5690456d784cad3fcb6220149d13
- MD5 862d7b8d25d93af6f5b3bbb47ae4a117
- SHA1 e878974e50ed8c281f6e78b0b5fc39fdb2f8c424
- SHA512 94f829478985f438247efa77b3826e370a89b5ceaecc1b0c5fdcb1e1e820a6982a76baa6cb0d74d8a710edd1202ec30eeb60e391158319913a213bea81851c59
- SSDEEP 49152:mlIKCZ4eKE0Ff2JiCzBRAfl6zJPBiLRlfEyUu+Zq9SASScpfB5X:pKvPEKuzKO4nEyD+A9SVN55
- TLSH T1A9F55A23B19AD0D4C00DD074CF165BB2A6617C69CBE5A7DF06C87E217B359E07ABA318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1