General
- Target 2026-08-24_3451858561564e215707426180cb77fd_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.7MB
- Sample260825-s714dahg75
- SHA256 56b344e7234adbdd2895faf9efe7e746266d2588c7613e4cf5c5450a5370052d
- MD5 3451858561564e215707426180cb77fd
- SHA1 02b0991c05b97216ee116a1cc32a40c75078dc6d
- SHA512 f5dec977ca0f618183dc232edaf8d4b9b28b0f3221987b20360c3937be5e51edc1b742e70fc4c06c9d5efeb5763ead9eb97ece0ef5b62e42f12eb1f64f7f47b2
- SSDEEP 98304:1BvJvolLMOz7Iyp1PJIYvkc+t8eJu1cNSb73fVmah3Ou0:1YZz0yp1PJIYvk3t8kEnfVNh370
- TLSH T1A4666C53F3A501E8D06ED974CF6D5122AA257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_3451858561564e215707426180cb77fd_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_3451858561564e215707426180cb77fd_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.7MB
- SHA256 56b344e7234adbdd2895faf9efe7e746266d2588c7613e4cf5c5450a5370052d
- MD5 3451858561564e215707426180cb77fd
- SHA1 02b0991c05b97216ee116a1cc32a40c75078dc6d
- SHA512 f5dec977ca0f618183dc232edaf8d4b9b28b0f3221987b20360c3937be5e51edc1b742e70fc4c06c9d5efeb5763ead9eb97ece0ef5b62e42f12eb1f64f7f47b2
- SSDEEP 98304:1BvJvolLMOz7Iyp1PJIYvkc+t8eJu1cNSb73fVmah3Ou0:1YZz0yp1PJIYvk3t8kEnfVNh370
- TLSH T1A4666C53F3A501E8D06ED974CF6D5122AA257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1