General
- Target 2026-07-31_decc69fd0f17b0c3bcc169bbc1769f13_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.7MB
- Sample260801-blfrwavbne
- SHA256 04257dac3ec294f55a19e68a62c89338ee15a7be984f8c1c0bda0ba43b9c14f6
- MD5 decc69fd0f17b0c3bcc169bbc1769f13
- SHA1 2cc8bac5c4af330b3975e58c06a950b5e5127327
- SHA512 7de4f8306dd92f339f520902fb48a6acf09ecc110baa12181ce3a67b32bf612b917e03b11c68050be099f24106ac4e248df64cbf5bf8cc262b8e2784b413093c
- SSDEEP 196608:pNdj2NIf48J4fF4pmheex/ptEejE6H9xbWxI0NjH/1dhVn7MKN:N2c4U4F4pmca5RYhNT/1pHN
- TLSH T130179F43F6EA50ECD0B6C53097769263AA327C851F3499EF0190862D2E75FD06E39B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_decc69fd0f17b0c3bcc169bbc1769f13_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_decc69fd0f17b0c3bcc169bbc1769f13_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_decc69fd0f17b0c3bcc169bbc1769f13_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.7MB
- SHA256 04257dac3ec294f55a19e68a62c89338ee15a7be984f8c1c0bda0ba43b9c14f6
- MD5 decc69fd0f17b0c3bcc169bbc1769f13
- SHA1 2cc8bac5c4af330b3975e58c06a950b5e5127327
- SHA512 7de4f8306dd92f339f520902fb48a6acf09ecc110baa12181ce3a67b32bf612b917e03b11c68050be099f24106ac4e248df64cbf5bf8cc262b8e2784b413093c
- SSDEEP 196608:pNdj2NIf48J4fF4pmheex/ptEejE6H9xbWxI0NjH/1dhVn7MKN:N2c4U4F4pmca5RYhNT/1pHN
- TLSH T130179F43F6EA50ECD0B6C53097769263AA327C851F3499EF0190862D2E75FD06E39B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger