General
- Target 2026-10-17_97908ed8ab621a8fe7f9308f6eda7da9_cobalt-strike_icedid_ryuk_satacom
- Size 1.1MB
- Sample261018-3kshtsav5r
- SHA256 ad75a8ce78281ebe1db984be023720a096e1d81a20c91d14cb1767a131f57ecd
- MD5 97908ed8ab621a8fe7f9308f6eda7da9
- SHA1 4125f09adc1659d847f0d1a9512d3ad67e4df6e0
- SHA512 e1232cedfae782b68f76631a995368d4bfc050d682d9ab7ad6e22e18caa635445b72c94f7030dc2cd10389c36fc102dc8c08708bbbd9fd8d10186f1398a60b64
- SSDEEP 24576:pwKfonheqc8aqNyZHsbIM3GT6zi9xWBW8rO1Obta2T0Jg:pwKfIG6T3JaxWBW/QbtFK
- TLSH T197353BD5EB394DF0F010963242372E209EA3354A52F9C17759AB3484583F1DBAAF663E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-17_97908ed8ab621a8fe7f9308f6eda7da9_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_97908ed8ab621a8fe7f9308f6eda7da9_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_97908ed8ab621a8fe7f9308f6eda7da9_cobalt-strike_icedid_ryuk_satacom
- Size 1.1MB
- SHA256 ad75a8ce78281ebe1db984be023720a096e1d81a20c91d14cb1767a131f57ecd
- MD5 97908ed8ab621a8fe7f9308f6eda7da9
- SHA1 4125f09adc1659d847f0d1a9512d3ad67e4df6e0
- SHA512 e1232cedfae782b68f76631a995368d4bfc050d682d9ab7ad6e22e18caa635445b72c94f7030dc2cd10389c36fc102dc8c08708bbbd9fd8d10186f1398a60b64
- SSDEEP 24576:pwKfonheqc8aqNyZHsbIM3GT6zi9xWBW8rO1Obta2T0Jg:pwKfIG6T3JaxWBW/QbtFK
- TLSH T197353BD5EB394DF0F010963242372E209EA3354A52F9C17759AB3484583F1DBAAF663E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext