General
- Target 2026-09-10_ab91d79dc13ac549d5f37d796c99989b_cobalt-strike_icedid_mespinoza_ryuk_satacom_stealc
- Size 542KB
- Sample260910-pfwssssgla
- SHA256 9da4b8ce6a00eb80e6932d4a5f880893e139de694ee656512c229d5c7a39ba34
- MD5 ab91d79dc13ac549d5f37d796c99989b
- SHA1 53f7040271ec7b1d44e7be5cfcb4eb6fd424a456
- SHA512 96ed6548b4032823761fc09a2de3dc75d1fb12c0c63e05e5e6a24a3d7cb0640f2cd74c9a02226d14ac28eddddf0a581e9764dbcfd36f4c53ad824a79b5f53a9a
- SSDEEP 12288:WF4FzBPe1DqK+TyDzwsBCEAtouARae76LL8uaOL3RDvyKPCGcN:WF4NB21DqK+TyDzw4VaouTDLwJKxIN
- TLSH T10BC46B0AB6A997BCC55BC839C2028E11B96174C60F72BDDF439597362E36AF44F3E610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_ab91d79dc13ac549d5f37d796c99989b_cobalt-strike_icedid_mespinoza_ryuk_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_ab91d79dc13ac549d5f37d796c99989b_cobalt-strike_icedid_mespinoza_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_ab91d79dc13ac549d5f37d796c99989b_cobalt-strike_icedid_mespinoza_ryuk_satacom_stealc
- Size 542KB
- SHA256 9da4b8ce6a00eb80e6932d4a5f880893e139de694ee656512c229d5c7a39ba34
- MD5 ab91d79dc13ac549d5f37d796c99989b
- SHA1 53f7040271ec7b1d44e7be5cfcb4eb6fd424a456
- SHA512 96ed6548b4032823761fc09a2de3dc75d1fb12c0c63e05e5e6a24a3d7cb0640f2cd74c9a02226d14ac28eddddf0a581e9764dbcfd36f4c53ad824a79b5f53a9a
- SSDEEP 12288:WF4FzBPe1DqK+TyDzwsBCEAtouARae76LL8uaOL3RDvyKPCGcN:WF4NB21DqK+TyDzw4VaouTDLwJKxIN
- TLSH T10BC46B0AB6A997BCC55BC839C2028E11B96174C60F72BDDF439597362E36AF44F3E610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application