General
- Target 2026-10-19_594f3c0e64e57cd946b77e003686f7fc_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.4MB
- Sample261020-yc375sda49
- SHA256 97793ae6afe744d1df40b3d9be843a32b4615652746878bae477f8c079f96ef0
- MD5 594f3c0e64e57cd946b77e003686f7fc
- SHA1 c27a9f7bc08767cfd53aaf7ee0a98e91a00caf18
- SHA512 e491d1b9b7795516da3b863f811f1efa20aef83b2aa8b7840b69bb618bcd752ef7f9925f2e52c353091bc768faaedd227030945184ca0125327fa2c84bc4bb37
- SSDEEP 49152:wDp8IIX/b3BkiZfFfRIKLZfr5KsyboJd6pYhf00qshIMiag2/ZHsZelmOvJvt/wc:xSil3X7da8yaZqimOBV/wJTy
- TLSH T1A0268C23F2E600E8C05DD1759B469332AAE17CA58F70A3DF465173161FB6AD06B3E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-19_594f3c0e64e57cd946b77e003686f7fc_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_594f3c0e64e57cd946b77e003686f7fc_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.4MB
- SHA256 97793ae6afe744d1df40b3d9be843a32b4615652746878bae477f8c079f96ef0
- MD5 594f3c0e64e57cd946b77e003686f7fc
- SHA1 c27a9f7bc08767cfd53aaf7ee0a98e91a00caf18
- SHA512 e491d1b9b7795516da3b863f811f1efa20aef83b2aa8b7840b69bb618bcd752ef7f9925f2e52c353091bc768faaedd227030945184ca0125327fa2c84bc4bb37
- SSDEEP 49152:wDp8IIX/b3BkiZfFfRIKLZfr5KsyboJd6pYhf00qshIMiag2/ZHsZelmOvJvt/wc:xSil3X7da8yaZqimOBV/wJTy
- TLSH T1A0268C23F2E600E8C05DD1759B469332AAE17CA58F70A3DF465173161FB6AD06B3E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1