General
- Target 2026-07-03_7ba8b8ed57db384eef4858349e1e9dd8_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- Sample260703-rfpetsaw7t
- SHA256 fb8a4fe8eef7638651f34f08b1fd3d3d1502681a315d9df9dcab94705955aaf1
- MD5 7ba8b8ed57db384eef4858349e1e9dd8
- SHA1 2d7ed397dd2ca4259d98bac1501876b77f476c56
- SHA512 726689fe3cd662079332fd3e17c8e5f54eae6fc9d0a9a3f9bcdd0d965a3dbc86ec0cf795a086dbe4e0336cd025d1fcb32a4c20bf714f72c505e332485994c065
- SSDEEP 24576:XMqGwGMjuAI2hKwwalI83Hf6PA7yIb21TSowC0K1S+sqjnhMgeiCl7G0nehbGZpv:XMbMjLZUgIO2nI4DJ0wvDmg27RnWGj
- TLSH T185B52733B29AD0D4C40D90B0CF164BF195A17CB9C7D597DB02D87E25BB36AD07ABA209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_7ba8b8ed57db384eef4858349e1e9dd8_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_7ba8b8ed57db384eef4858349e1e9dd8_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- SHA256 fb8a4fe8eef7638651f34f08b1fd3d3d1502681a315d9df9dcab94705955aaf1
- MD5 7ba8b8ed57db384eef4858349e1e9dd8
- SHA1 2d7ed397dd2ca4259d98bac1501876b77f476c56
- SHA512 726689fe3cd662079332fd3e17c8e5f54eae6fc9d0a9a3f9bcdd0d965a3dbc86ec0cf795a086dbe4e0336cd025d1fcb32a4c20bf714f72c505e332485994c065
- SSDEEP 24576:XMqGwGMjuAI2hKwwalI83Hf6PA7yIb21TSowC0K1S+sqjnhMgeiCl7G0nehbGZpv:XMbMjLZUgIO2nI4DJ0wvDmg27RnWGj
- TLSH T185B52733B29AD0D4C40D90B0CF164BF195A17CB9C7D597DB02D87E25BB36AD07ABA209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1