General
- Target 2026-08-30_cccfb2625a08888cf27b5957cbc25c19_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.6MB
- Sample260831-ev99maw1f1
- SHA256 137ce5e5e2d2b42e1d1d11bc82134bbeb7fb68f203329d1657031adf0bd0aca9
- MD5 cccfb2625a08888cf27b5957cbc25c19
- SHA1 6c3552c7073a81d7f841f8ea281086903e9b2ad4
- SHA512 a8a9aa124b2477b88bc6e419d8040f239b369490aa8318ffa26e3e8e8c7408f1c8a4508ca48e27fdd7eb2f2d77e29ea4330df9b1db914c389337a29cb0758951
- SSDEEP 49152:UecRXsqj1Y5gJw2WqPCv+JEW6U0pO27VAGIEjs3RV8f19qVfhl1ey:q7Ku257VIE6zQqRYy
- TLSH T15A065B23B18B90D8C01DD174CB564BB2A5617CA9C7A5A3DF06D87F213B36AD07BB9318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_cccfb2625a08888cf27b5957cbc25c19_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_cccfb2625a08888cf27b5957cbc25c19_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.6MB
- SHA256 137ce5e5e2d2b42e1d1d11bc82134bbeb7fb68f203329d1657031adf0bd0aca9
- MD5 cccfb2625a08888cf27b5957cbc25c19
- SHA1 6c3552c7073a81d7f841f8ea281086903e9b2ad4
- SHA512 a8a9aa124b2477b88bc6e419d8040f239b369490aa8318ffa26e3e8e8c7408f1c8a4508ca48e27fdd7eb2f2d77e29ea4330df9b1db914c389337a29cb0758951
- SSDEEP 49152:UecRXsqj1Y5gJw2WqPCv+JEW6U0pO27VAGIEjs3RV8f19qVfhl1ey:q7Ku257VIE6zQqRYy
- TLSH T15A065B23B18B90D8C01DD174CB564BB2A5617CA9C7A5A3DF06D87F213B36AD07BB9318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1