f5d1db0a2e9d9181e55d5bd64ac9e1488da298ee0949f96ff12985e9e479d0ad | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-09-01...uk.exe

windows10-2004-x64

2026-09-01...uk.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_094d0c762633b3592058a837b775c301_cobalt-strike_icedid_ryuk
Size 31.6MB
Sample260901-1x6j4sfa28
SHA256 f5d1db0a2e9d9181e55d5bd64ac9e1488da298ee0949f96ff12985e9e479d0ad
MD5 094d0c762633b3592058a837b775c301
SHA1 24804f3f401bb449d6aea4e2e85923308542ea0e
SHA512 16e9fd8c6a34aa03fce2f47b3e5ab3f155c7b36ac273f08493c98882a9319a0bceb3d5164f7af97f0a8e5c1742593d35fe81ab7dd7d0f6719b19e71921d7a44f
SSDEEP 786432:mEaDsCb+PI5u4vjeoMnTLOocMT/JX4n0Y1u7YbUMo:Ra535u4vqhOxg4n0ZKo
TLSH
T1B6773308D58F62D4E306D83004261615DEFABE60478ABFB783981F59BEA31C57D3768E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion persistence privilege_escalation trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-09-01_094d0c762633b3592058a837b775c301_cobalt-strike_icedid_ryuk.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

2026-09-01_094d0c762633b3592058a837b775c301_cobalt-strike_icedid_ryuk.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  2026-09-01_094d0c762633b3592058a837b775c301_cobalt-strike_icedid_ryuk
- Size 31.6MB
- SHA256 f5d1db0a2e9d9181e55d5bd64ac9e1488da298ee0949f96ff12985e9e479d0ad
- MD5 094d0c762633b3592058a837b775c301
- SHA1 24804f3f401bb449d6aea4e2e85923308542ea0e
- SHA512 16e9fd8c6a34aa03fce2f47b3e5ab3f155c7b36ac273f08493c98882a9319a0bceb3d5164f7af97f0a8e5c1742593d35fe81ab7dd7d0f6719b19e71921d7a44f
- SSDEEP 786432:mEaDsCb+PI5u4vjeoMnTLOocMT/JX4n0Y1u7YbUMo:Ra535u4vqhOxg4n0ZKo
- TLSH
  T1B6773308D58F62D4E306D83004261615DEFABE60478ABFB783981F59BEA31C57D3768E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion persistence privilege_escalation trojan
- Windows security bypass
  defense_evasion trojan
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Windows security modification
  defense_evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionpersistenceprivilege_escalationtrojan

behavioral2

defense_evasionpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy