General
- Target 2026-10-01_3c8a5b261506cc1e352f7d7ca50820b3_cobalt-strike_icedid_ryuk_satacom
- Size 1.0MB
- Sample261002-tr6jlaea52
- SHA256 b692608f3ff16d44ef6c14c1cb38b1e3b463ea8b9ed9163e98c5e4776a603a98
- MD5 3c8a5b261506cc1e352f7d7ca50820b3
- SHA1 81c45207f79ecd893cd5251c94e266b2e4d6eca2
- SHA512 d0bb9e89d07bd27581e1e92901b3fa23ab248c281f393e4f649653870fa274169b398d80b320e93ab6ac67ff9f2c17635a9408dab3c32c3edc74c38faae6be3e
- SSDEEP 12288:3XdLuudAyDeORu6f8Sq6ZcdIYAcJ1PmD6bXR30Ikwgxm4dC6hEgmE5:ojfs8L6SIYAmPpRRk/w4dJrmW
- TLSH T15635291427179CF5F42D31BED8199F98326AA4D9ADECDC09123CD36868E767C23F8252
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_3c8a5b261506cc1e352f7d7ca50820b3_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_3c8a5b261506cc1e352f7d7ca50820b3_cobalt-strike_icedid_ryuk_satacom
- Size 1.0MB
- SHA256 b692608f3ff16d44ef6c14c1cb38b1e3b463ea8b9ed9163e98c5e4776a603a98
- MD5 3c8a5b261506cc1e352f7d7ca50820b3
- SHA1 81c45207f79ecd893cd5251c94e266b2e4d6eca2
- SHA512 d0bb9e89d07bd27581e1e92901b3fa23ab248c281f393e4f649653870fa274169b398d80b320e93ab6ac67ff9f2c17635a9408dab3c32c3edc74c38faae6be3e
- SSDEEP 12288:3XdLuudAyDeORu6f8Sq6ZcdIYAcJ1PmD6bXR30Ikwgxm4dC6hEgmE5:ojfs8L6SIYAmPpRRk/w4dJrmW
- TLSH T15635291427179CF5F42D31BED8199F98326AA4D9ADECDC09123CD36868E767C23F8252
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext