General
- Target 2026-11-12_1f3035c847194efa6724767cc441f6ca_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 1.0MB
- Sample261113-h2dqsahs8m
- SHA256 0603678b9fa61ac8e12c101c077df14187569fb109838789ece9eb565b3e9e3a
- MD5 1f3035c847194efa6724767cc441f6ca
- SHA1 a49daba6e0fc892b1a0110ab8da137f9ddfeacfe
- SHA512 c8804ac6317f9c3d5e5a82cb9e86936740774e0568af020df55244cbff3b003e51f67b7e3fc6f60849971b642c291d2c6ea232f8bf59621788d3ac1baabeac5c
- SSDEEP 12288:dJFvF6ek0NdJm+q1UcDgN7JEdqOyn+V0kiXQLPcPeHU+4ntJZMzVBcq41z1w8P7k:fdc+qUcDiDEPcPeH8x4sljWEr9
- TLSH T16E352B16698DE9BCD186C8B4734F19031A35B59F1765B8EF43C8AE713EAB2B50B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_1f3035c847194efa6724767cc441f6ca_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_1f3035c847194efa6724767cc441f6ca_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_1f3035c847194efa6724767cc441f6ca_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc
- Size 1.0MB
- SHA256 0603678b9fa61ac8e12c101c077df14187569fb109838789ece9eb565b3e9e3a
- MD5 1f3035c847194efa6724767cc441f6ca
- SHA1 a49daba6e0fc892b1a0110ab8da137f9ddfeacfe
- SHA512 c8804ac6317f9c3d5e5a82cb9e86936740774e0568af020df55244cbff3b003e51f67b7e3fc6f60849971b642c291d2c6ea232f8bf59621788d3ac1baabeac5c
- SSDEEP 12288:dJFvF6ek0NdJm+q1UcDgN7JEdqOyn+V0kiXQLPcPeHU+4ntJZMzVBcq41z1w8P7k:fdc+qUcDiDEPcPeH8x4sljWEr9
- TLSH T16E352B16698DE9BCD186C8B4734F19031A35B59F1765B8EF43C8AE713EAB2B50B31B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application