General
- Target 2026-08-20_6e04f2b4fecc10304608ec83b376d982_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.8MB
- Sample260820-ssbj6stscw
- SHA256 8c829f6a4f5c89f28ae60acf6b6fabc1025d04c29315767d613a016eec4d4ce7
- MD5 6e04f2b4fecc10304608ec83b376d982
- SHA1 1598162fbf955177e78e3c8d5df9b4f3469d46ed
- SHA512 00ee84a3fab2d4a4fbafa7a9410b989c0ad9d64e5413ffea64374c481da093936d0d6ecd7d86c572d8d42679c933dac200044ac911d69922ea2d1b62bddbf4f7
- SSDEEP 49152:57u8gnytIb0KEHaINwntSXt+GLgmsLBDDV1nGyacuqt8ugFmQejQ1SN0DL/gn6r4:o7j5nQLLkDDVk2sFVoX6xpsDvBvjU3l
- TLSH T144368C13F29901E8C01DD1798B4A9232FA62BC454B35B6DF0A9077522F7AEE46F3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_6e04f2b4fecc10304608ec83b376d982_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_6e04f2b4fecc10304608ec83b376d982_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.8MB
- SHA256 8c829f6a4f5c89f28ae60acf6b6fabc1025d04c29315767d613a016eec4d4ce7
- MD5 6e04f2b4fecc10304608ec83b376d982
- SHA1 1598162fbf955177e78e3c8d5df9b4f3469d46ed
- SHA512 00ee84a3fab2d4a4fbafa7a9410b989c0ad9d64e5413ffea64374c481da093936d0d6ecd7d86c572d8d42679c933dac200044ac911d69922ea2d1b62bddbf4f7
- SSDEEP 49152:57u8gnytIb0KEHaINwntSXt+GLgmsLBDDV1nGyacuqt8ugFmQejQ1SN0DL/gn6r4:o7j5nQLLkDDVk2sFVoX6xpsDvBvjU3l
- TLSH T144368C13F29901E8C01DD1798B4A9232FA62BC454B35B6DF0A9077522F7AEE46F3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory