General
- Target 2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc
- Size 392KB
- Sample261107-2yskbasv5p
- SHA256 e3725de563711290aef52dd9ae84d814a8e38abd6c29c2105ea96869ba16f194
- MD5 cdcb2a965c4953b526f910c99c6b8dea
- SHA1 7cabd6d66cd828a830aa52be61073824ce1e60bc
- SHA512 48019af1ec1a1376c524aac8e29a86f4a11103bc3f4a59143aa7b31abe9cc3195ae9ba9612c5245e95c15108fab4bbd74bfdde8f5dbcedc6f6352be1e1e52d07
- SSDEEP 6144:Fwd++jQ2/y8MUnT2jiN1Z9m0E9ofJp25PveXDsBRHJeqdR:FwP3y8MU42Tm0E9of6ZWzwHJeo
- TLSH T1D484AF55F3D500FAE16BC17889424516FA72BC164B60A6DF37A42E9A3F23BD09E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc
- Size 392KB
- SHA256 e3725de563711290aef52dd9ae84d814a8e38abd6c29c2105ea96869ba16f194
- MD5 cdcb2a965c4953b526f910c99c6b8dea
- SHA1 7cabd6d66cd828a830aa52be61073824ce1e60bc
- SHA512 48019af1ec1a1376c524aac8e29a86f4a11103bc3f4a59143aa7b31abe9cc3195ae9ba9612c5245e95c15108fab4bbd74bfdde8f5dbcedc6f6352be1e1e52d07
- SSDEEP 6144:Fwd++jQ2/y8MUnT2jiN1Z9m0E9ofJp25PveXDsBRHJeqdR:FwP3y8MU42Tm0E9of6ZWzwHJeo
- TLSH T1D484AF55F3D500FAE16BC17889424516FA72BC164B60A6DF37A42E9A3F23BD09E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.