General
- Target 2026-10-26_8d88508d6d4e8e99475c3d1dab5c648a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 1.0MB
- Sample261027-pbmpbsde33
- SHA256 3d5dfd6cb49fe7f1c994c6661ca4f21b8fb7a54f4256f823e03f00211e7d9c32
- MD5 8d88508d6d4e8e99475c3d1dab5c648a
- SHA1 2ee2d51f44bddbd37eb5515a952aac839294d481
- SHA512 0ec28148a63f848424b5836d5c5f7671e0c22269649780da32dec8864e73d89115c9c36080bb859e488c8dfe7d4050a7f6022736bdea58de54fc544d44505ed1
- SSDEEP 12288:PJFvF6ek0NdJm+q1UcDgN7JEdqOyn+V0kiXQLPcPeHU+4ntJZMzVBcq41z1w8P7V:xdc+qUcDiDEPcPeH8x4sljWErTn
- TLSH T1C3352A16698DE9BCD187C8B4734F19031A35759F1765A8EF43C8AE713EAB2B90B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_8d88508d6d4e8e99475c3d1dab5c648a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_8d88508d6d4e8e99475c3d1dab5c648a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_8d88508d6d4e8e99475c3d1dab5c648a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 1.0MB
- SHA256 3d5dfd6cb49fe7f1c994c6661ca4f21b8fb7a54f4256f823e03f00211e7d9c32
- MD5 8d88508d6d4e8e99475c3d1dab5c648a
- SHA1 2ee2d51f44bddbd37eb5515a952aac839294d481
- SHA512 0ec28148a63f848424b5836d5c5f7671e0c22269649780da32dec8864e73d89115c9c36080bb859e488c8dfe7d4050a7f6022736bdea58de54fc544d44505ed1
- SSDEEP 12288:PJFvF6ek0NdJm+q1UcDgN7JEdqOyn+V0kiXQLPcPeHU+4ntJZMzVBcq41z1w8P7V:xdc+qUcDiDEPcPeH8x4sljWErTn
- TLSH T1C3352A16698DE9BCD187C8B4734F19031A35759F1765A8EF43C8AE713EAB2B90B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application