General
- Target 2026-11-03_361e7e56c0d97805e9d2aba935c090ae_cobalt-strike_icedid_ryuk_satacom
- Size 1.2MB
- Sample261104-3xkczset2v
- SHA256 25a304c6c86280df66d62a76192ced177c49603a122640fbc3a57011bec21bed
- MD5 361e7e56c0d97805e9d2aba935c090ae
- SHA1 edd7fec4655531594a4ea3ff39272f4738fc1d77
- SHA512 e2ccf8f93a616c9b70bd1a682209ae2138adba4bb39a5c90a7a74ff7cdcd2c802de979ed1723f73a653a9739ccd7a7dc818763fc73613d930f1934e1751f34a6
- SSDEEP 24576:sfdGmvRVbXlB+27LPheM4UWMpg47JnfRjIPbtY:slGOlIuhP7b
- TLSH T1DA45DFA1A3950DFDF42E8E7586852B31A5E5F8120BE148AF065CF34D3E266DCCBF5A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_361e7e56c0d97805e9d2aba935c090ae_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_361e7e56c0d97805e9d2aba935c090ae_cobalt-strike_icedid_ryuk_satacom.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_361e7e56c0d97805e9d2aba935c090ae_cobalt-strike_icedid_ryuk_satacom
- Size 1.2MB
- SHA256 25a304c6c86280df66d62a76192ced177c49603a122640fbc3a57011bec21bed
- MD5 361e7e56c0d97805e9d2aba935c090ae
- SHA1 edd7fec4655531594a4ea3ff39272f4738fc1d77
- SHA512 e2ccf8f93a616c9b70bd1a682209ae2138adba4bb39a5c90a7a74ff7cdcd2c802de979ed1723f73a653a9739ccd7a7dc818763fc73613d930f1934e1751f34a6
- SSDEEP 24576:sfdGmvRVbXlB+27LPheM4UWMpg47JnfRjIPbtY:slGOlIuhP7b
- TLSH T1DA45DFA1A3950DFDF42E8E7586852B31A5E5F8120BE148AF065CF34D3E266DCCBF5A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.