General
- Target 2026-11-07_9d8a4dfb9d8ff8f3226ff2827aa3cffc_cobalt-strike_icedid_njrat_ryuk_satacom_stealc
- Size 775KB
- Sample261107-nwf7lsbt5v
- SHA256 cae5ade6cdefe64400d25c552391a5891aaa1149826640f09040247a6b0baee3
- MD5 9d8a4dfb9d8ff8f3226ff2827aa3cffc
- SHA1 d9dde59a8af37db2d843ce6af7038265ebfe425f
- SHA512 cdff9a9ac4b12bd956d7c8c7b062514e56214b7e5fb7c7c5040ddd03f57e841c3b023ed2fe31ba7e0234cd652c9c69327377401646951c23ef31c66015d47e05
- SSDEEP 12288:hHwyc8HrXB8riI7+BxpB6Rg4YzrazhfhoF27FHwKZivl7AycWpN:Bc8jkRo+RQm0F27FHwK2pN
- TLSH T117F46B09ABAA14BAD593C87498472593D636348B0734ACFF43D4867A3F276904F3E71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-07_9d8a4dfb9d8ff8f3226ff2827aa3cffc_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_9d8a4dfb9d8ff8f3226ff2827aa3cffc_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_9d8a4dfb9d8ff8f3226ff2827aa3cffc_cobalt-strike_icedid_njrat_ryuk_satacom_stealc
- Size 775KB
- SHA256 cae5ade6cdefe64400d25c552391a5891aaa1149826640f09040247a6b0baee3
- MD5 9d8a4dfb9d8ff8f3226ff2827aa3cffc
- SHA1 d9dde59a8af37db2d843ce6af7038265ebfe425f
- SHA512 cdff9a9ac4b12bd956d7c8c7b062514e56214b7e5fb7c7c5040ddd03f57e841c3b023ed2fe31ba7e0234cd652c9c69327377401646951c23ef31c66015d47e05
- SSDEEP 12288:hHwyc8HrXB8riI7+BxpB6Rg4YzrazhfhoF27FHwKZivl7AycWpN:Bc8jkRo+RQm0F27FHwK2pN
- TLSH T117F46B09ABAA14BAD593C87498472593D636348B0734ACFF43D4867A3F276904F3E71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application