General
- Target 2026-10-26_b5197f0d314378ae83e2e7ec693bae88_cobalt-strike_icedid_ryuk_satacom
- Size 1.0MB
- Sample261027-knr3cssxcs
- SHA256 b03703043a47746df7e8872a972e3a592958bd3d13ae4844280eb0d64def3933
- MD5 b5197f0d314378ae83e2e7ec693bae88
- SHA1 a71954427cca41c9e78a4dabc9f6ad198536d6d2
- SHA512 12608d25ecb9a87246df0ac8ae975f8184ab3e4ab96153cd7b463b9da517a97708646e0cd85bab1cf9e12324e850878760ba6a266902836cef0b21a8e23b816b
- SSDEEP 24576:0nis/NBD45MK1fygyjKfySx5NcHIJ691dON7hj3:1s1BDAZm6UjOz
- TLSH T15C35CD01B3A50EF8FF57817746E11A01A6F5780D47EC95ABB2BF331A0E269914EFD610
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_b5197f0d314378ae83e2e7ec693bae88_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_b5197f0d314378ae83e2e7ec693bae88_cobalt-strike_icedid_ryuk_satacom
- Size 1.0MB
- SHA256 b03703043a47746df7e8872a972e3a592958bd3d13ae4844280eb0d64def3933
- MD5 b5197f0d314378ae83e2e7ec693bae88
- SHA1 a71954427cca41c9e78a4dabc9f6ad198536d6d2
- SHA512 12608d25ecb9a87246df0ac8ae975f8184ab3e4ab96153cd7b463b9da517a97708646e0cd85bab1cf9e12324e850878760ba6a266902836cef0b21a8e23b816b
- SSDEEP 24576:0nis/NBD45MK1fygyjKfySx5NcHIJ691dON7hj3:1s1BDAZm6UjOz
- TLSH T15C35CD01B3A50EF8FF57817746E11A01A6F5780D47EC95ABB2BF331A0E269914EFD610
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext