General
- Target 2026-10-28_94ba3e61d07f821c012c31a197e61760_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 1.0MB
- Sample261029-29pmssfw3t
- SHA256 42f62f4f8898a08d90d9a1c2d16876f071cb76b9c24ceda19fc6f97f576594d8
- MD5 94ba3e61d07f821c012c31a197e61760
- SHA1 d193f648a4a6979b47ad34cec3156b14d6668839
- SHA512 93d9595c45352ccb7d963632a2c6d98d4cb08432dec0dc920a25a0546c228268de30ab93226918201565289a11cde33827e827144225649b39c87cdd60d94dab
- SSDEEP 12288:7JFvF6ek0NdJm+q1UcDgN7JEdqOyn+V0kiXQLPcPeHU+4ntJZMzVBcq41z1w8P7D:Ndc+qUcDiDEPcPeH8x4sljWErNn
- TLSH T140353A16698DE97CE187C8B4734F19031A35759F4765A8EF43C8AE713EAB2B90B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_94ba3e61d07f821c012c31a197e61760_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_94ba3e61d07f821c012c31a197e61760_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_94ba3e61d07f821c012c31a197e61760_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 1.0MB
- SHA256 42f62f4f8898a08d90d9a1c2d16876f071cb76b9c24ceda19fc6f97f576594d8
- MD5 94ba3e61d07f821c012c31a197e61760
- SHA1 d193f648a4a6979b47ad34cec3156b14d6668839
- SHA512 93d9595c45352ccb7d963632a2c6d98d4cb08432dec0dc920a25a0546c228268de30ab93226918201565289a11cde33827e827144225649b39c87cdd60d94dab
- SSDEEP 12288:7JFvF6ek0NdJm+q1UcDgN7JEdqOyn+V0kiXQLPcPeHU+4ntJZMzVBcq41z1w8P7D:Ndc+qUcDiDEPcPeH8x4sljWErNn
- TLSH T140353A16698DE97CE187C8B4734F19031A35759F4765A8EF43C8AE713EAB2B90B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application