General
- Target 2026-08-04_5c8f1325ee8cc2dceabd5bcc4dc54a96_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- Sample260804-s4gkkatdpc
- SHA256 0b0391b29d8ad4641ec208eccc2cf87cd640130fd0579c6a2f47f56f2a4f8778
- MD5 5c8f1325ee8cc2dceabd5bcc4dc54a96
- SHA1 85efb06ba9653095b67ac8d4eb3a675f121c3739
- SHA512 a130409f80360f4486689dee1c0b98252de4305b4940b08cfefb25594075cc52fc245c0776ccfb56c561f397e763207d56f2355fb76a3b7c2ff96d361dabc091
- SSDEEP 49152:fppINuhOVlGnZgcRJqBzytzPoN8725H0KIRGrl4Pdv9JcaYinWMGbAxUEAVIzK6E:YVAZ1PoN8IH0IyP7JmwUnyvC4Lm
- TLSH T11B666C53F3A501E8D06ED974CF6991229A257C8A47B0E3EF1AD436E11A71ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_5c8f1325ee8cc2dceabd5bcc4dc54a96_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5c8f1325ee8cc2dceabd5bcc4dc54a96_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- SHA256 0b0391b29d8ad4641ec208eccc2cf87cd640130fd0579c6a2f47f56f2a4f8778
- MD5 5c8f1325ee8cc2dceabd5bcc4dc54a96
- SHA1 85efb06ba9653095b67ac8d4eb3a675f121c3739
- SHA512 a130409f80360f4486689dee1c0b98252de4305b4940b08cfefb25594075cc52fc245c0776ccfb56c561f397e763207d56f2355fb76a3b7c2ff96d361dabc091
- SSDEEP 49152:fppINuhOVlGnZgcRJqBzytzPoN8725H0KIRGrl4Pdv9JcaYinWMGbAxUEAVIzK6E:YVAZ1PoN8IH0IyP7JmwUnyvC4Lm
- TLSH T11B666C53F3A501E8D06ED974CF6991229A257C8A47B0E3EF1AD436E11A71ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1