General
- Target 2026-09-16_94741ab578fbc906684b9aaa5482e0a8_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.9MB
- Sample260916-mrmm6aygpb
- SHA256 cbc6e846fac68bea0597b76470086bdf07ffe725fab45f8e885189acea3dc97d
- MD5 94741ab578fbc906684b9aaa5482e0a8
- SHA1 ba99e24c804333f7bbfafede43942691e66281a1
- SHA512 2b9a5af7aeeba11afac9327a203b55a04e32330569b2cc8699251cd4d43d1afc90ac4d30464bf44394503b07d83faf462a3c7fd7187bfd1f7f58e985a0db4732
- SSDEEP 98304:KuhCVtkP/QXJgbKY2BrAaA+v4/sfJu1icLWemtTYtH:17oZYst0uem
- TLSH T130369D13F29901E8C05DD179874A9232FA72BC454B35B6DF0A9077522F7AEE46B3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_94741ab578fbc906684b9aaa5482e0a8_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_94741ab578fbc906684b9aaa5482e0a8_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.9MB
- SHA256 cbc6e846fac68bea0597b76470086bdf07ffe725fab45f8e885189acea3dc97d
- MD5 94741ab578fbc906684b9aaa5482e0a8
- SHA1 ba99e24c804333f7bbfafede43942691e66281a1
- SHA512 2b9a5af7aeeba11afac9327a203b55a04e32330569b2cc8699251cd4d43d1afc90ac4d30464bf44394503b07d83faf462a3c7fd7187bfd1f7f58e985a0db4732
- SSDEEP 98304:KuhCVtkP/QXJgbKY2BrAaA+v4/sfJu1icLWemtTYtH:17oZYst0uem
- TLSH T130369D13F29901E8C05DD179874A9232FA72BC454B35B6DF0A9077522F7AEE46B3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1