General
- Target 2026-09-08_00fc48659892662da91e183cd376633a_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.8MB
- Sample260908-y2e7lsxtg1
- SHA256 6952d07e962c0fc60680132543902b898e8570c21fb1b433a2c40be46c1c44ea
- MD5 00fc48659892662da91e183cd376633a
- SHA1 164bfacf39181bacea6e005ce2a25a65027f47ce
- SHA512 7e4da3237c25a2f4b05166a32bc8b0bd48e394e0836e66d6e2b37328a59ba663b878a24c953df346ff3043c004662417669f988566bafc419dfdd0ba284c0fae
- SSDEEP 98304:pqJHfM/nbAr1nQbNl0ctoB9CipNK2dR8uRX:MoErhQbT0+IBAu
- TLSH T179667C53F3A501E8D06ED974CF6D91229A257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_00fc48659892662da91e183cd376633a_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_00fc48659892662da91e183cd376633a_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.8MB
- SHA256 6952d07e962c0fc60680132543902b898e8570c21fb1b433a2c40be46c1c44ea
- MD5 00fc48659892662da91e183cd376633a
- SHA1 164bfacf39181bacea6e005ce2a25a65027f47ce
- SHA512 7e4da3237c25a2f4b05166a32bc8b0bd48e394e0836e66d6e2b37328a59ba663b878a24c953df346ff3043c004662417669f988566bafc419dfdd0ba284c0fae
- SSDEEP 98304:pqJHfM/nbAr1nQbNl0ctoB9CipNK2dR8uRX:MoErhQbT0+IBAu
- TLSH T179667C53F3A501E8D06ED974CF6D91229A257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1