General
- Target 2026-11-02_cef84468e56c51f0a7226f833638d894_cobalt-strike_icedid_ryuk_satacom
- Size 1.0MB
- Sample261102-16671agd87
- SHA256 ff3fd0c3cb9f49b50451167f505d1cf4b2a5916fab332d01898b785f8c007776
- MD5 cef84468e56c51f0a7226f833638d894
- SHA1 f4aab5bb8ad7488499b750660303f2cb773e050a
- SHA512 94478e7e7e1e8d654392a81dbde6c6f845c3df384cdd447d0b5fe08a04c12176bd0ad140ef6ce631a0d74a875b2dedff99f269fe6364bff44729b390abf298e3
- SSDEEP 24576:x6x5ert97ZDmX/M/P9nx9UGAancbJ/iHmq:Mx56LpG2jzAFq
- TLSH T11F353B82BBA55DFFF2625ABC05926600381B540347C12ED6BE1C527781239693EFCF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_cef84468e56c51f0a7226f833638d894_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_cef84468e56c51f0a7226f833638d894_cobalt-strike_icedid_ryuk_satacom
- Size 1.0MB
- SHA256 ff3fd0c3cb9f49b50451167f505d1cf4b2a5916fab332d01898b785f8c007776
- MD5 cef84468e56c51f0a7226f833638d894
- SHA1 f4aab5bb8ad7488499b750660303f2cb773e050a
- SHA512 94478e7e7e1e8d654392a81dbde6c6f845c3df384cdd447d0b5fe08a04c12176bd0ad140ef6ce631a0d74a875b2dedff99f269fe6364bff44729b390abf298e3
- SSDEEP 24576:x6x5ert97ZDmX/M/P9nx9UGAancbJ/iHmq:Mx56LpG2jzAFq
- TLSH T11F353B82BBA55DFFF2625ABC05926600381B540347C12ED6BE1C527781239693EFCF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext