General
- Target 2026-10-22_be0df29331bc0fb8048146046e9c3edd_cobalt-strike_icedid_ryuk_satacom
- Size 1.3MB
- Sample261023-2af7davy3l
- SHA256 f84feb66671ecb4b79c7ddbdc72acc56c71aa3f4bfe3c07a9c6f41917e3e0a2c
- MD5 be0df29331bc0fb8048146046e9c3edd
- SHA1 d49668cf243691652fd6af3994afe697dd12beac
- SHA512 3a641f0d21f3c0866359539731c6bcda52efdbbe22d014421c2f7108aa412e7c41cf022e1b1c4feaaaae89356f6fd4f22898b15e2c4a9756f9f2254fdeca9037
- SSDEEP 24576:zkLike9Tn7kiKZsu9AbMxHbMteuDSgB+FNrud7NF5:zwhgV4Sai
- TLSH T1C4555B02EBCBCE76F601483D95994199627328748AC83D7FC12F2D790D7A5E2BAF3215
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_be0df29331bc0fb8048146046e9c3edd_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_be0df29331bc0fb8048146046e9c3edd_cobalt-strike_icedid_ryuk_satacom
- Size 1.3MB
- SHA256 f84feb66671ecb4b79c7ddbdc72acc56c71aa3f4bfe3c07a9c6f41917e3e0a2c
- MD5 be0df29331bc0fb8048146046e9c3edd
- SHA1 d49668cf243691652fd6af3994afe697dd12beac
- SHA512 3a641f0d21f3c0866359539731c6bcda52efdbbe22d014421c2f7108aa412e7c41cf022e1b1c4feaaaae89356f6fd4f22898b15e2c4a9756f9f2254fdeca9037
- SSDEEP 24576:zkLike9Tn7kiKZsu9AbMxHbMteuDSgB+FNrud7NF5:zwhgV4Sai
- TLSH T1C4555B02EBCBCE76F601483D95994199627328748AC83D7FC12F2D790D7A5E2BAF3215
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext