General
- Target 2026-07-01_c4b205552329fa35745c62c0152691c1_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260701-jkpmdshs3k
- SHA256 c3ffc7d0398aab5a69a5fe0d755a5e9bb8b20429389674a48f35fb698b9c4beb
- MD5 c4b205552329fa35745c62c0152691c1
- SHA1 8058caafb22708b30b5409895801aea115fa67c9
- SHA512 e57fae46a4e94fc94305567fe40b6dace42e5b9c2a3e3a782c8bdfdc554c4f4cd75831d45be6dbfc9eb5cd53de68c329dcf869a52be53a18745c5f8c30c56329
- SSDEEP 49152:UHC5/EaWEzVHEh2bK2pTETMcRWS1SZBnHTAsi:UH0Y2R+cNzAz
- TLSH T1D885BF07F69600FCD06DC1B8CB169532EAB1B8850F31AADF1290A7292E77AE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_c4b205552329fa35745c62c0152691c1_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_c4b205552329fa35745c62c0152691c1_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_c4b205552329fa35745c62c0152691c1_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 c3ffc7d0398aab5a69a5fe0d755a5e9bb8b20429389674a48f35fb698b9c4beb
- MD5 c4b205552329fa35745c62c0152691c1
- SHA1 8058caafb22708b30b5409895801aea115fa67c9
- SHA512 e57fae46a4e94fc94305567fe40b6dace42e5b9c2a3e3a782c8bdfdc554c4f4cd75831d45be6dbfc9eb5cd53de68c329dcf869a52be53a18745c5f8c30c56329
- SSDEEP 49152:UHC5/EaWEzVHEh2bK2pTETMcRWS1SZBnHTAsi:UH0Y2R+cNzAz
- TLSH T1D885BF07F69600FCD06DC1B8CB169532EAB1B8850F31AADF1290A7292E77AE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1