General
- Target 2026-08-15_89e0d3c7cb8705a2258c8fa78b25445e_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- Sample260815-d4879aywhv
- SHA256 7085bd49dd8b659647ee4371e39e6f16ae9978948d96df59fd01075bedb454c4
- MD5 89e0d3c7cb8705a2258c8fa78b25445e
- SHA1 bc8c9f18330ec710a0b4e9adbf780cdd9a1ed305
- SHA512 cf98d365a096c17f95119ae3bdc8591ecb16ed2dde752dffce8a80a5e85e013a816dd069d7ecc7db40de3659a0fc8d9b5a3922efb6e5b55c331d8d2175e69e71
- SSDEEP 98304:0LhSLRWsmF0t4uQLNrICrYngNeZLRRTK37wRGpj3:0LhSLR8puVCYQIRiF9
- TLSH T174666C53F3A501E8D06ED974CF6D51229A257C8A47B0E3EF2AD436E51A31ED47B38B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_89e0d3c7cb8705a2258c8fa78b25445e_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_89e0d3c7cb8705a2258c8fa78b25445e_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.4MB
- SHA256 7085bd49dd8b659647ee4371e39e6f16ae9978948d96df59fd01075bedb454c4
- MD5 89e0d3c7cb8705a2258c8fa78b25445e
- SHA1 bc8c9f18330ec710a0b4e9adbf780cdd9a1ed305
- SHA512 cf98d365a096c17f95119ae3bdc8591ecb16ed2dde752dffce8a80a5e85e013a816dd069d7ecc7db40de3659a0fc8d9b5a3922efb6e5b55c331d8d2175e69e71
- SSDEEP 98304:0LhSLRWsmF0t4uQLNrICrYngNeZLRRTK37wRGpj3:0LhSLR8puVCYQIRiF9
- TLSH T174666C53F3A501E8D06ED974CF6D51229A257C8A47B0E3EF2AD436E51A31ED47B38B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1