General
- Target 2026-09-21_71197795dc93a18e1408546f454c0cbc_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.6MB
- Sample260922-pnet9aszhy
- SHA256 2c9221d81b7acec5460bce5e913b2e93a219f920b5285738c399378da5ea7f57
- MD5 71197795dc93a18e1408546f454c0cbc
- SHA1 efe77e4a19b8b28be222eff5edc50a41dd8b0a50
- SHA512 8b0ca97760c28d19ee2232d4e24c43da993a5d0d45883d4b39e33d06f408e80673d5d8e32ea6df480e6060c106e02346b3d97534a2f4297f488056e63438f360
- SSDEEP 49152:3eqDxpkcC/JaG5TJxlGc6O9p+XyrfOM0NghZYHiqWhM03TxDZY8fgC2KUcLN/j2B:mB/Zzlv64sXi7ukF1j2jF
- TLSH T140066B23B2E600D8C05DD1759B468332AAE1BCA58F70A3DF465177161FB6ED06B3E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_71197795dc93a18e1408546f454c0cbc_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_71197795dc93a18e1408546f454c0cbc_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 3.6MB
- SHA256 2c9221d81b7acec5460bce5e913b2e93a219f920b5285738c399378da5ea7f57
- MD5 71197795dc93a18e1408546f454c0cbc
- SHA1 efe77e4a19b8b28be222eff5edc50a41dd8b0a50
- SHA512 8b0ca97760c28d19ee2232d4e24c43da993a5d0d45883d4b39e33d06f408e80673d5d8e32ea6df480e6060c106e02346b3d97534a2f4297f488056e63438f360
- SSDEEP 49152:3eqDxpkcC/JaG5TJxlGc6O9p+XyrfOM0NghZYHiqWhM03TxDZY8fgC2KUcLN/j2B:mB/Zzlv64sXi7ukF1j2jF
- TLSH T140066B23B2E600D8C05DD1759B468332AAE1BCA58F70A3DF465177161FB6ED06B3E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1