General
- Target 2026-05-22_2cd3085808177e9f4314fb450bc2d2e0_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260522-dnjyesf161
- SHA256 8389f6ceac9556d2fd56240a93a5f8231131a368e81b1ca2d6fe253f31cac0e4
- MD5 2cd3085808177e9f4314fb450bc2d2e0
- SHA1 dd1d0205d860c035e567026e2278265df4a4a37d
- SHA512 2dea54edc2d1774febfa9e2fca59a7b15e8baaf38efc3554423eec6ee0f00ed594629934d89a5bce2f2a00180161658a1679ca46230c29ad354d2f54748453ae
- SSDEEP 24576:/Hs5q8dXY3aWnEz0GhxEww3mbQXg5TpTv5uTc/cuinKmRRWEl43MqpALDXmCS:/Hs5/EaWEzVHEh2bK2pTETMc6EutcDpS
- TLSH T13785BF07B69500FCD06DC1B8CB569532EAB1B8850F31BAEF1290A7292E76EE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_2cd3085808177e9f4314fb450bc2d2e0_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_2cd3085808177e9f4314fb450bc2d2e0_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 8389f6ceac9556d2fd56240a93a5f8231131a368e81b1ca2d6fe253f31cac0e4
- MD5 2cd3085808177e9f4314fb450bc2d2e0
- SHA1 dd1d0205d860c035e567026e2278265df4a4a37d
- SHA512 2dea54edc2d1774febfa9e2fca59a7b15e8baaf38efc3554423eec6ee0f00ed594629934d89a5bce2f2a00180161658a1679ca46230c29ad354d2f54748453ae
- SSDEEP 24576:/Hs5q8dXY3aWnEz0GhxEww3mbQXg5TpTv5uTc/cuinKmRRWEl43MqpALDXmCS:/Hs5/EaWEzVHEh2bK2pTETMc6EutcDpS
- TLSH T13785BF07B69500FCD06DC1B8CB569532EAB1B8850F31BAEF1290A7292E76EE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory