General
- Target 2026-08-15_82853342641c9599001047c6d91f850d_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.7MB
- Sample260815-m2l5davarc
- SHA256 5a3d9506c81984d0a9887818c44d67a2f0634e68a74aeeac78ffd39b2138dbf6
- MD5 82853342641c9599001047c6d91f850d
- SHA1 6e22efa0a69161769e8063ddc1a079fec037c00c
- SHA512 586010f95cefac4ef55a7d785883baa245b3daca66d19262cf0b28504cc8490e0616e3c67337a2372ed0d5ab358298608d83f911b0ade335263af782a49f542f
- SSDEEP 98304:8H4KGCLjLbQJ3XgmfWm/MVZO273fVmah3Ou0:sUcOQm+VZOQfVNh370
- TLSH T1C2667C53F3A501E8D06ED974CF6D5122AA257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_82853342641c9599001047c6d91f850d_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_82853342641c9599001047c6d91f850d_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.7MB
- SHA256 5a3d9506c81984d0a9887818c44d67a2f0634e68a74aeeac78ffd39b2138dbf6
- MD5 82853342641c9599001047c6d91f850d
- SHA1 6e22efa0a69161769e8063ddc1a079fec037c00c
- SHA512 586010f95cefac4ef55a7d785883baa245b3daca66d19262cf0b28504cc8490e0616e3c67337a2372ed0d5ab358298608d83f911b0ade335263af782a49f542f
- SSDEEP 98304:8H4KGCLjLbQJ3XgmfWm/MVZO273fVmah3Ou0:sUcOQm+VZOQfVNh370
- TLSH T1C2667C53F3A501E8D06ED974CF6D5122AA257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1