General
- Target 2026-07-31_6e81bce7ee626e4ff3576c0dc5d64e3b_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.7MB
- Sample260801-bv146svdkf
- SHA256 d1b5b7402046b5958e1bc8ae61a71507c8f4666fa25a7313dd57923ce30b8b8b
- MD5 6e81bce7ee626e4ff3576c0dc5d64e3b
- SHA1 96cc8d9e4becbb37087949e42ca4d013c7d02185
- SHA512 c2fd1ae7b05827198e9a03f67966314c5a18e141bb3a857f1e1718d9d867842627bac241259c3eb238de1a321aba5482a49e01c8658c235088ee130ff13769e8
- SSDEEP 196608:ZNdj2NIf48J4fF4pmheex/ptEejE6H9xbWxI0NjH/1dhVn7MKq:92c4U4F4pmca5RYhNT/1pHq
- TLSH T14D179F43F6EA50ECD0B6C53097769263AA327C851F3499EF0190862D2E75FD06E39B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_6e81bce7ee626e4ff3576c0dc5d64e3b_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_6e81bce7ee626e4ff3576c0dc5d64e3b_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_6e81bce7ee626e4ff3576c0dc5d64e3b_cobalt-strike_coinminer_icedid_njrat_remcos_ryuk_satacom
- Size 18.7MB
- SHA256 d1b5b7402046b5958e1bc8ae61a71507c8f4666fa25a7313dd57923ce30b8b8b
- MD5 6e81bce7ee626e4ff3576c0dc5d64e3b
- SHA1 96cc8d9e4becbb37087949e42ca4d013c7d02185
- SHA512 c2fd1ae7b05827198e9a03f67966314c5a18e141bb3a857f1e1718d9d867842627bac241259c3eb238de1a321aba5482a49e01c8658c235088ee130ff13769e8
- SSDEEP 196608:ZNdj2NIf48J4fF4pmheex/ptEejE6H9xbWxI0NjH/1dhVn7MKq:92c4U4F4pmca5RYhNT/1pHq
- TLSH T14D179F43F6EA50ECD0B6C53097769263AA327C851F3499EF0190862D2E75FD06E39B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger