General
- Target 2026-08-22_4739362057911c578256ba85656edbcd_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- Sample260822-e1646avxgt
- SHA256 1c60456c981d41af359a228b0d08a0df15dbd9ccdd2f583e8d1b24ef26eb007a
- MD5 4739362057911c578256ba85656edbcd
- SHA1 1efbd1984490268b7a054c03a878b70d6d21f4f0
- SHA512 06e870a6a625015425ef49667f8ee9dbbc412b181848bc74fea91afbce8371c40b8ce729bf4b3255d728def045abf57ddb57bc76b8af18ee618632caa4ad8a65
- SSDEEP 49152:CaBGl8SPbjzZro8mKR47Cci4OPOdKNnafPTixvQ/lFTjN4:YKL6Uun0kkLm
- TLSH T1F3F56B23B1E600D9C04DD0769F4A9332ABE17C658FB0A3DF465072161FB6AD46B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_4739362057911c578256ba85656edbcd_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_4739362057911c578256ba85656edbcd_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.2MB
- SHA256 1c60456c981d41af359a228b0d08a0df15dbd9ccdd2f583e8d1b24ef26eb007a
- MD5 4739362057911c578256ba85656edbcd
- SHA1 1efbd1984490268b7a054c03a878b70d6d21f4f0
- SHA512 06e870a6a625015425ef49667f8ee9dbbc412b181848bc74fea91afbce8371c40b8ce729bf4b3255d728def045abf57ddb57bc76b8af18ee618632caa4ad8a65
- SSDEEP 49152:CaBGl8SPbjzZro8mKR47Cci4OPOdKNnafPTixvQ/lFTjN4:YKL6Uun0kkLm
- TLSH T1F3F56B23B1E600D9C04DD0769F4A9332ABE17C658FB0A3DF465072161FB6AD46B3E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1