General
- Target 2026-07-31_80702bb852da819469bee75ddef6ff6f_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- Sample260731-nqgaeshf52
- SHA256 ea93245031b2ff31cf01dce26142a8d008207b358fc21fc5af58cfb8c6b1ade8
- MD5 80702bb852da819469bee75ddef6ff6f
- SHA1 c0e203f7610362e4c24dde6ec1d32f661e05153d
- SHA512 c141d8b90d3553bd83cbfae3784cc5b318659cf06cd05d1d1eaf36a55d3e29dafccadeb1ed086fc297b1222364cd05023e1a410c92a510e2be9c54205b3d9095
- SSDEEP 49152:FpUoY1EkbTv4QJalKfaZiyzxeW3LwNFXdHQOu0jG4C52eO0kK20G/LUs6nAnlofQ:6j4TvUMLWGOTGvx5GVGNZ760V9SVN55
- TLSH T1BE666C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E11A71ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_80702bb852da819469bee75ddef6ff6f_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_80702bb852da819469bee75ddef6ff6f_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- SHA256 ea93245031b2ff31cf01dce26142a8d008207b358fc21fc5af58cfb8c6b1ade8
- MD5 80702bb852da819469bee75ddef6ff6f
- SHA1 c0e203f7610362e4c24dde6ec1d32f661e05153d
- SHA512 c141d8b90d3553bd83cbfae3784cc5b318659cf06cd05d1d1eaf36a55d3e29dafccadeb1ed086fc297b1222364cd05023e1a410c92a510e2be9c54205b3d9095
- SSDEEP 49152:FpUoY1EkbTv4QJalKfaZiyzxeW3LwNFXdHQOu0jG4C52eO0kK20G/LUs6nAnlofQ:6j4TvUMLWGOTGvx5GVGNZ760V9SVN55
- TLSH T1BE666C53F3A501E8D06ED974CF6D91229A257C8A47B0A3EF1AD436E11A71ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1