General
- Target 2026-09-10_3dcbfa1d72c2c6b488dcd72deb83c310_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.6MB
- Sample260910-wf55sswtbz
- SHA256 8c13b0926efbcadd69b197e052c8b31fb00d47e709452382abd96ffc4e87ed85
- MD5 3dcbfa1d72c2c6b488dcd72deb83c310
- SHA1 579c36c7761732488005d3bab9fd5fbdfc0241c2
- SHA512 fa47ecfbce5c76d7d4364a9b651205e195448fcfa74453c3f14829634ccd24b17ff7ffa1465e36c5de5c67da36e83d76d4d5fe3fe2f83082be357744df41cf1d
- SSDEEP 49152:qeJ2parrqFULC/en6QpxfaF21FtTi3sZZRE7nee3g1tQDmg27RnWGj:4PyyGZY4m0e7swD527BWG
- TLSH T189065B23B19B90D8C01DD074CF564BB2A5617CA9C7A5A3DF06D47E213B36AD07BBA318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_3dcbfa1d72c2c6b488dcd72deb83c310_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_3dcbfa1d72c2c6b488dcd72deb83c310_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.6MB
- SHA256 8c13b0926efbcadd69b197e052c8b31fb00d47e709452382abd96ffc4e87ed85
- MD5 3dcbfa1d72c2c6b488dcd72deb83c310
- SHA1 579c36c7761732488005d3bab9fd5fbdfc0241c2
- SHA512 fa47ecfbce5c76d7d4364a9b651205e195448fcfa74453c3f14829634ccd24b17ff7ffa1465e36c5de5c67da36e83d76d4d5fe3fe2f83082be357744df41cf1d
- SSDEEP 49152:qeJ2parrqFULC/en6QpxfaF21FtTi3sZZRE7nee3g1tQDmg27RnWGj:4PyyGZY4m0e7swD527BWG
- TLSH T189065B23B19B90D8C01DD074CF564BB2A5617CA9C7A5A3DF06D47E213B36AD07BBA318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1