Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
24/10/2026, 14:03
General
- Target 2026-10-22_4b2d68f6f95a21b84cd16e00aaaba550_cobalt-strike_icedid_ryuk_satacom.exe
- Size 3.2MB
- Sample261024-rcscbab19m
- SHA256 82b498eb7390037bbba767068903a4c6be81ecbf76327a3160cd72298f3d2a75
Malware Config
Signatures
- Drops file in Program Files directory 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 18 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\2026-10-22_4b2d68f6f95a21b84cd16e00aaaba550_cobalt-strike_icedid_ryuk_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-22_4b2d68f6f95a21b84cd16e00aaaba550_cobalt-strike_icedid_ryuk_satacom.exe"2⤵
- Drops file in Program Files directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3264-6-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-7-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-5-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-4-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-3-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-2-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-1-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-0-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-8-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-11-0x00000000025F0000-0x0000000002600000-memory.dmp
memory/3264-10-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-9-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-12-0x00007FFF67E92000-0x00007FFF67E93000-memory.dmp
memory/3264-13-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-14-0x0000000007740000-0x00000000077E1000-memory.dmp
memory/3264-15-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-17-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-16-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-20-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-19-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-18-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-23-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-22-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-21-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-25-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-30-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-31-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-29-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-28-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-27-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-26-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-24-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-32-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-37-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-36-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-35-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-34-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-33-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-38-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-41-0x00000000025F0000-0x0000000002600000-memory.dmp
memory/3264-40-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-39-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-44-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-43-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-51-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-50-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-52-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-49-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-48-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-55-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-54-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-61-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-62-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-63-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-60-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-59-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-58-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-57-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-56-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-53-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-46-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-47-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-45-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-42-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-65-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-64-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-67-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-66-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-68-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-69-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-70-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-72-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-71-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-74-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-73-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-76-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-75-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-77-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-80-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-79-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-78-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-81-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-83-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-82-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-89-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-88-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-87-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-86-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-85-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-84-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-93-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-92-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-91-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-90-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-94-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-95-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-96-0x00007FFF67DF0000-0x00007FFF67EF7000-memory.dmp
memory/3264-97-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-98-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-99-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-100-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-101-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-102-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-103-0x0000000000840000-0x0000000000850000-memory.dmp
memory/3264-104-0x0000000000840000-0x0000000000850000-memory.dmp