General
- Target 2026-07-04_093783f7138bb41238fb4b8fe3bd4c72_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- Sample260704-mv5cdaav7p
- SHA256 36ff9a05f0485f0e1d4ce31f390484614254abc5b7e7823dae089aee1529f568
- MD5 093783f7138bb41238fb4b8fe3bd4c72
- SHA1 6907aaa5997791a2bcf1c4e6cd005188c0fdfda6
- SHA512 1f3b89eda3ca115e51e66974090dbb6ecc886c5e9165ea860ad466700159ed0bbdc7fdaf7b960efe0c5b67ccc48b1a2bd0c8a74bdc5406fd902b48a9c19e41c8
- SSDEEP 24576:nbYGh8aotHB08zSpxwpCw8jeqmRI+8IPZr6rw:EG8NB0QpCZqmzUZr68
- TLSH T16935D015A7E500F9E1F7E678C9A35A02E77B7C460670DA4F03E8813B2F676509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_093783f7138bb41238fb4b8fe3bd4c72_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_093783f7138bb41238fb4b8fe3bd4c72_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_093783f7138bb41238fb4b8fe3bd4c72_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- SHA256 36ff9a05f0485f0e1d4ce31f390484614254abc5b7e7823dae089aee1529f568
- MD5 093783f7138bb41238fb4b8fe3bd4c72
- SHA1 6907aaa5997791a2bcf1c4e6cd005188c0fdfda6
- SHA512 1f3b89eda3ca115e51e66974090dbb6ecc886c5e9165ea860ad466700159ed0bbdc7fdaf7b960efe0c5b67ccc48b1a2bd0c8a74bdc5406fd902b48a9c19e41c8
- SSDEEP 24576:nbYGh8aotHB08zSpxwpCw8jeqmRI+8IPZr6rw:EG8NB0QpCZqmzUZr68
- TLSH T16935D015A7E500F9E1F7E678C9A35A02E77B7C460670DA4F03E8813B2F676509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1