General
- Target 2026-08-10_c38e0fa39b1c4afcd15c653473d49698_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.4MB
- Sample260810-qqfd8saj5w
- SHA256 1b03f6ab9b23aaa34f7fcecc44de5f1bb49cd457a4eacccbe42bf89c58bdcc5f
- MD5 c38e0fa39b1c4afcd15c653473d49698
- SHA1 472e3fad5346c99d67d23e4e81eaef91d76de46c
- SHA512 dd615e8af53cdfb6d4a03e596e11ce5ec352e5bfe211ae46bee946ecb88cffe42b94ddff4eb7f5339b461890d1ae6c17ca100780eb0dba5a76c7e8833850e384
- SSDEEP 49152:MGYTYw/o8ldU0f9XI531u/4JfWoJsrEFoMu3JM2HTlQxsbX4ZPzwFI/wOifnzH:0/d9Xn/dD3lhJYYtH
- TLSH T148F59E13F2EA01E8D06ED2788B669233EA72BC454B35B6DF0A5072151F76EE05B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_c38e0fa39b1c4afcd15c653473d49698_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_c38e0fa39b1c4afcd15c653473d49698_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.4MB
- SHA256 1b03f6ab9b23aaa34f7fcecc44de5f1bb49cd457a4eacccbe42bf89c58bdcc5f
- MD5 c38e0fa39b1c4afcd15c653473d49698
- SHA1 472e3fad5346c99d67d23e4e81eaef91d76de46c
- SHA512 dd615e8af53cdfb6d4a03e596e11ce5ec352e5bfe211ae46bee946ecb88cffe42b94ddff4eb7f5339b461890d1ae6c17ca100780eb0dba5a76c7e8833850e384
- SSDEEP 49152:MGYTYw/o8ldU0f9XI531u/4JfWoJsrEFoMu3JM2HTlQxsbX4ZPzwFI/wOifnzH:0/d9Xn/dD3lhJYYtH
- TLSH T148F59E13F2EA01E8D06ED2788B669233EA72BC454B35B6DF0A5072151F76EE05B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1