General
- Target 2026-11-01_9026e58fa7956d5e51da86482c70f0c1_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.6MB
- Sample261102-sbdyzavset
- SHA256 2dbb61ed362907c3171ae6e1d6e9104d7451541442476267af5c9a2f9b0cf16c
- MD5 9026e58fa7956d5e51da86482c70f0c1
- SHA1 0cbbf940470d10a75586afdb95c7d7cc1f34714a
- SHA512 61332d1e89144d9aeed6e6d56d3939d008d65398d7712691ac2df93801522da2bd2ab3ac3ad201de8fe45b96d51a49f0865866e6a7d17dc699cf4a67b5efff50
- SSDEEP 49152:ktrboRYpeuYkGSVOT1k3YNjDlw64YGlguT+5P5xjvy+c9LVeKo/La+LF3BbLYNGP:oPwuQ23TlMx0CTF5RbPh7wRGpj3
- TLSH T134268C13F29A11E8C01DD179874B9232EA61BC454B35B6DF0B9077522F7AEE46B3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_9026e58fa7956d5e51da86482c70f0c1_cobalt-strike_icedid_njrat_ryuk_satacom.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_9026e58fa7956d5e51da86482c70f0c1_cobalt-strike_icedid_njrat_ryuk_satacom
- Size 4.6MB
- SHA256 2dbb61ed362907c3171ae6e1d6e9104d7451541442476267af5c9a2f9b0cf16c
- MD5 9026e58fa7956d5e51da86482c70f0c1
- SHA1 0cbbf940470d10a75586afdb95c7d7cc1f34714a
- SHA512 61332d1e89144d9aeed6e6d56d3939d008d65398d7712691ac2df93801522da2bd2ab3ac3ad201de8fe45b96d51a49f0865866e6a7d17dc699cf4a67b5efff50
- SSDEEP 49152:ktrboRYpeuYkGSVOT1k3YNjDlw64YGlguT+5P5xjvy+c9LVeKo/La+LF3BbLYNGP:oPwuQ23TlMx0CTF5RbPh7wRGpj3
- TLSH T134268C13F29A11E8C01DD179874B9232EA61BC454B35B6DF0B9077522F7AEE46B3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1