General
- Target 2026-08-12_f37584ba04fa40457ca176b254e10568_cobalt-strike_icedid_ryuk
- Size 130KB
- Sample260812-pyjaesxcjd
- SHA256 7360e1c02ed2d95f76f44b39e103dafc358591bb21563953af2c3b81a8f63b5c
- MD5 f37584ba04fa40457ca176b254e10568
- SHA1 2505ed170a699be865fdc31985b323074a740717
- SHA512 ef48566a6a11da9dc59beb3a4214117f7b8fde92ae9fe839380c31b84fd222c978eb6eacd567e29870a0dbc0671605f3128cc63655e16b8e23b9a7bfea2a29da
- SSDEEP 3072:Jdt9TyRo2f6foIynSdo93vxFDyDBfpydUmYsgyZahf:HtNu5ChynSdo9/xkDnSah
- TLSH T14FD33B07B29D70F8E576923894614A41B7F77C314B219FFF06A44F696E636C0AD3AB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_f37584ba04fa40457ca176b254e10568_cobalt-strike_icedid_ryuk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_f37584ba04fa40457ca176b254e10568_cobalt-strike_icedid_ryuk.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f37584ba04fa40457ca176b254e10568_cobalt-strike_icedid_ryuk
- Size 130KB
- SHA256 7360e1c02ed2d95f76f44b39e103dafc358591bb21563953af2c3b81a8f63b5c
- MD5 f37584ba04fa40457ca176b254e10568
- SHA1 2505ed170a699be865fdc31985b323074a740717
- SHA512 ef48566a6a11da9dc59beb3a4214117f7b8fde92ae9fe839380c31b84fd222c978eb6eacd567e29870a0dbc0671605f3128cc63655e16b8e23b9a7bfea2a29da
- SSDEEP 3072:Jdt9TyRo2f6foIynSdo93vxFDyDBfpydUmYsgyZahf:HtNu5ChynSdo9/xkDnSah
- TLSH T14FD33B07B29D70F8E576923894614A41B7F77C314B219FFF06A44F696E636C0AD3AB20
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Drops file in System32 directory