General
- Target 2026-08-18_a941babbd444cdf46a38afe4e52a4da8_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.2MB
- Sample260818-lyrd9azejh
- SHA256 467335ef536bb1e2957e80d4261dba38bdeff0ed87a6f27984f89137fe9cba71
- MD5 a941babbd444cdf46a38afe4e52a4da8
- SHA1 26b3f69f1fd46a1c6f0a2eaab9c8d8bde529d4db
- SHA512 ca2000c4f1a6b9da86d422087b2f2f1729ca90602d4ae151deebc5e60823b916c9a4b728197a5adb42a31d7ac1d161b392f447be09d251d0c51018f38bbc39bd
- SSDEEP 49152:20+ISyCH1w5p2sTwWJ0z17QBvBDyvSIpOUhwsP2UwczOV/bdskPGXQ/lFTjN4:20ZYQ9t0zGPe7N92U5ONrLm
- TLSH T1F9269D13F69A01D8C01DD1B9874A9232FA71BC456B35B6DF0A9077122F7AEE46B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_a941babbd444cdf46a38afe4e52a4da8_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a941babbd444cdf46a38afe4e52a4da8_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.2MB
- SHA256 467335ef536bb1e2957e80d4261dba38bdeff0ed87a6f27984f89137fe9cba71
- MD5 a941babbd444cdf46a38afe4e52a4da8
- SHA1 26b3f69f1fd46a1c6f0a2eaab9c8d8bde529d4db
- SHA512 ca2000c4f1a6b9da86d422087b2f2f1729ca90602d4ae151deebc5e60823b916c9a4b728197a5adb42a31d7ac1d161b392f447be09d251d0c51018f38bbc39bd
- SSDEEP 49152:20+ISyCH1w5p2sTwWJ0z17QBvBDyvSIpOUhwsP2UwczOV/bdskPGXQ/lFTjN4:20ZYQ9t0zGPe7N92U5ONrLm
- TLSH T1F9269D13F69A01D8C01DD1B9874A9232FA71BC456B35B6DF0A9077122F7AEE46B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1