General
- Target 2026-05-30_e24d9f6eca1d5d5d300bfd9db5576099_cobalt-strike_icedid_njrat_satacom_vidar
- Size 855KB
- Sample260530-2gp3vset7w
- SHA256 7782a5045d9d08fea53be59786502a83c51da5894344b144db5cc7173fc14fe0
- MD5 e24d9f6eca1d5d5d300bfd9db5576099
- SHA1 3837acf6d72586f266d63f1357e180626b86e607
- SHA512 eed4c0f22f2eb47bee430f16984e7774f6d321eae29aa3ca3ffe22822d4736fc2a6e056f739281e7ed4db5adb70400b6c80999b4a3f01a8c30b68250b2748c60
- SSDEEP 24576:WryfWe/ZrmiSAzABB6196yB2w0f1uqKxx/RMPe:Wryee/ZrmiSBM1AbbKH/RM
- TLSH T1F01512A3E19830F5E427CA79C5604556BB32AC70166A5B8B4B107B6F8F336D1DE29F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-30_e24d9f6eca1d5d5d300bfd9db5576099_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_e24d9f6eca1d5d5d300bfd9db5576099_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_e24d9f6eca1d5d5d300bfd9db5576099_cobalt-strike_icedid_njrat_satacom_vidar
- Size 855KB
- SHA256 7782a5045d9d08fea53be59786502a83c51da5894344b144db5cc7173fc14fe0
- MD5 e24d9f6eca1d5d5d300bfd9db5576099
- SHA1 3837acf6d72586f266d63f1357e180626b86e607
- SHA512 eed4c0f22f2eb47bee430f16984e7774f6d321eae29aa3ca3ffe22822d4736fc2a6e056f739281e7ed4db5adb70400b6c80999b4a3f01a8c30b68250b2748c60
- SSDEEP 24576:WryfWe/ZrmiSAzABB6196yB2w0f1uqKxx/RMPe:Wryee/ZrmiSBM1AbbKH/RM
- TLSH T1F01512A3E19830F5E427CA79C5604556BB32AC70166A5B8B4B107B6F8F336D1DE29F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1