General
- Target 2026-07-05_ca9784092134eef6526fa373badf941a_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- Sample260705-p9fzfags4n
- SHA256 d16a8a1bbf1143c4e2d72ffbb32957e9bf6bc0a3b3c28408c6deba20cd3ccc01
- MD5 ca9784092134eef6526fa373badf941a
- SHA1 34287c9edffa48054917cc1e1339542e57cfe9d6
- SHA512 3d2de4149565e8e53801bb7308d77cfe49f738d9c773989abea83ea84eadbf5c4ef5cf4cd304fdea877b642b76a95f9a0e5c62e3dee5225fb994de90cce92ba9
- SSDEEP 24576:o4V4WUfIwMex+sKGnJ6azCIAsghZoUMdBuFoH/TwSfVcYG3K/cJHlnFR+IGNe8jg:tI+dGmFswAjugLNiXicJFFRGNzj3
- TLSH T1A685BF8993A801F8D4F7E275C9266902DAB7FCA90770569F02A0334E7F37564CE79B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_ca9784092134eef6526fa373badf941a_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_ca9784092134eef6526fa373badf941a_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- SHA256 d16a8a1bbf1143c4e2d72ffbb32957e9bf6bc0a3b3c28408c6deba20cd3ccc01
- MD5 ca9784092134eef6526fa373badf941a
- SHA1 34287c9edffa48054917cc1e1339542e57cfe9d6
- SHA512 3d2de4149565e8e53801bb7308d77cfe49f738d9c773989abea83ea84eadbf5c4ef5cf4cd304fdea877b642b76a95f9a0e5c62e3dee5225fb994de90cce92ba9
- SSDEEP 24576:o4V4WUfIwMex+sKGnJ6azCIAsghZoUMdBuFoH/TwSfVcYG3K/cJHlnFR+IGNe8jg:tI+dGmFswAjugLNiXicJFFRGNzj3
- TLSH T1A685BF8993A801F8D4F7E275C9266902DAB7FCA90770569F02A0334E7F37564CE79B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1