Analysis
- max time kernel
149s - max time network
133s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
03/10/2026, 17:23
General
- Target 2026-10-02_0fe8555d8c10b9b037b82aecacb3cdc0_cobalt-strike_icedid_ryuk_satacom.exe
- Size 987KB
- Sample261003-vx8ftatbpb
- SHA256 d54b3281626e88aa2d47ac6cf451f020c8eafa4e8b104b9808bc2e3ce3316265
Malware Config
Signatures
- Drops file in Program Files directory 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 18 IoCs
- Suspicious use of FindShellTrayWindow 4 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Users\Admin\AppData\Local\Temp\2026-10-02_0fe8555d8c10b9b037b82aecacb3cdc0_cobalt-strike_icedid_ryuk_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-02_0fe8555d8c10b9b037b82aecacb3cdc0_cobalt-strike_icedid_ryuk_satacom.exe"2⤵
- Drops file in Program Files directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3300-0-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-3-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-4-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-7-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-5-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-2-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-1-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-6-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-8-0x0000000008F50000-0x0000000008FDB000-memory.dmp
memory/3300-11-0x0000000003390000-0x00000000033A0000-memory.dmp
memory/3300-10-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-9-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-12-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-13-0x00007FF9E3B72000-0x00007FF9E3B73000-memory.dmp
memory/3300-14-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-16-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-15-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-18-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-17-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-19-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-20-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-21-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-22-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-23-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-25-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-24-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-26-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-31-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-29-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-34-0x0000000003390000-0x00000000033A0000-memory.dmp
memory/3300-33-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-32-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-38-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-40-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-39-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-37-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-36-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-35-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-30-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-28-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-27-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-41-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-43-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-42-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-44-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-47-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-46-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-45-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-52-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-51-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-55-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-60-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-59-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-64-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-65-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-67-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-71-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-70-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-68-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-69-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-66-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-63-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-62-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-61-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-56-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-58-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-57-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-54-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-53-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-50-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-49-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-48-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-73-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-72-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-75-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-74-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-79-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-78-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-81-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-80-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-77-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-76-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-82-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-84-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-85-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-83-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-86-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-91-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-90-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-89-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-88-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-92-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-87-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-94-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-95-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-93-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-96-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-97-0x00007FF9E3AD0000-0x00007FF9E3BD7000-memory.dmp
memory/3300-98-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-99-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-100-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-101-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-102-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-103-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-104-0x0000000003380000-0x0000000003390000-memory.dmp
memory/3300-105-0x0000000003380000-0x0000000003390000-memory.dmp