General
- Target 2026-06-29_80d5a293a17798afdcb5199eea341fb2_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- Sample260630-h574sshx7t
- SHA256 d3eac26f8a9a9763c62777747257a358ce192d143fc47c33ac143a674b544c9f
- MD5 80d5a293a17798afdcb5199eea341fb2
- SHA1 9a7c9af92c1a39cb7d0f1c44da8f01235bb80253
- SHA512 d2271875df808b2202b4735412172333ce9f94e2c9133e60d1534fc8bab3d6a6153449ab6de4d18e63a663461966e024a5741ab617bf4718d8c3a033b337482c
- SSDEEP 49152:jmzSJw/eEi3aj5TfDm9N7GdOQZ1pfJ4klKXnJ:6f7i3ajXnfJ4k
- TLSH T1EBB5BE13F6C941E9D06EC174974AA132EA62BC4A0B34B6EF0790B6562F77EE05B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_80d5a293a17798afdcb5199eea341fb2_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_80d5a293a17798afdcb5199eea341fb2_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- SHA256 d3eac26f8a9a9763c62777747257a358ce192d143fc47c33ac143a674b544c9f
- MD5 80d5a293a17798afdcb5199eea341fb2
- SHA1 9a7c9af92c1a39cb7d0f1c44da8f01235bb80253
- SHA512 d2271875df808b2202b4735412172333ce9f94e2c9133e60d1534fc8bab3d6a6153449ab6de4d18e63a663461966e024a5741ab617bf4718d8c3a033b337482c
- SSDEEP 49152:jmzSJw/eEi3aj5TfDm9N7GdOQZ1pfJ4klKXnJ:6f7i3ajXnfJ4k
- TLSH T1EBB5BE13F6C941E9D06EC174974AA132EA62BC4A0B34B6EF0790B6562F77EE05B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1