General
- Target 2026-10-08_6a1c599b4adf0449f187b1c223ed57a5_cobalt-strike_icedid_ryuk_satacom
- Size 31.0MB
- Sample261009-pvsppaex5r
- SHA256 3e7d6e0ddf3224ee953ce518dc5b1237377d70cd0258ee1ec0ade39b56966029
- MD5 6a1c599b4adf0449f187b1c223ed57a5
- SHA1 ce49ee7a6a7e2c9efa8253b04e06f7e0f31721a6
- SHA512 e1533cc928110c3e0c95c59a23442ef0cf586056dd84bc858714ea5eed3eeecf313a0821922e33b48ec8c77bf5788b9f00e167016af1de77aab7b5048c7ce172
- SSDEEP 786432:bNdMwGzi/wgDNF/Te7JhIs5z7/y1T5YW5VDEs4wPwLy:xdpF/tSf7wT5YwtEs5PEy
- TLSH T120673307FB9FC1AACF97C874CA62247AC8713C05DA95D2BF5599C7292C122CC49366F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_6a1c599b4adf0449f187b1c223ed57a5_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_6a1c599b4adf0449f187b1c223ed57a5_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_6a1c599b4adf0449f187b1c223ed57a5_cobalt-strike_icedid_ryuk_satacom
- Size 31.0MB
- SHA256 3e7d6e0ddf3224ee953ce518dc5b1237377d70cd0258ee1ec0ade39b56966029
- MD5 6a1c599b4adf0449f187b1c223ed57a5
- SHA1 ce49ee7a6a7e2c9efa8253b04e06f7e0f31721a6
- SHA512 e1533cc928110c3e0c95c59a23442ef0cf586056dd84bc858714ea5eed3eeecf313a0821922e33b48ec8c77bf5788b9f00e167016af1de77aab7b5048c7ce172
- SSDEEP 786432:bNdMwGzi/wgDNF/Te7JhIs5z7/y1T5YW5VDEs4wPwLy:xdpF/tSf7wT5YwtEs5PEy
- TLSH T120673307FB9FC1AACF97C874CA62247AC8713C05DA95D2BF5599C7292C122CC49366F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext