General
- Target 2026-09-09_2cf2ffc4cfaf32f4b56ce18913168b7a_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.8MB
- Sample260909-2exd6abk9t
- SHA256 3009824af8bccd702daf50b8e1797b212afca1d5362e0ea6e71e6072811e88a4
- MD5 2cf2ffc4cfaf32f4b56ce18913168b7a
- SHA1 ba9ba487418513ccc5f9504bbc729191e27066cd
- SHA512 9d27d3ad0ba253af131721ea337b5bc6279e23e642d84bb680ece5797f56ff350198b60f26268e89fbf9e8d7ea838f314f4e1ddbae518bb15b70c3ecab661c21
- SSDEEP 98304:TqJHfM/nbAr1nQbNl0uLoB9CipNFD527BWG:uoErhQbT0iIFVQBWG
- TLSH T1A1667C53F3A501E8D06ED974CF6D91229A257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_2cf2ffc4cfaf32f4b56ce18913168b7a_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_2cf2ffc4cfaf32f4b56ce18913168b7a_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 6.8MB
- SHA256 3009824af8bccd702daf50b8e1797b212afca1d5362e0ea6e71e6072811e88a4
- MD5 2cf2ffc4cfaf32f4b56ce18913168b7a
- SHA1 ba9ba487418513ccc5f9504bbc729191e27066cd
- SHA512 9d27d3ad0ba253af131721ea337b5bc6279e23e642d84bb680ece5797f56ff350198b60f26268e89fbf9e8d7ea838f314f4e1ddbae518bb15b70c3ecab661c21
- SSDEEP 98304:TqJHfM/nbAr1nQbNl0uLoB9CipNFD527BWG:uoErhQbT0iIFVQBWG
- TLSH T1A1667C53F3A501E8D06ED974CF6D91229A257C8A47B1A3EF1AD436E11A31ED47B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1