General
- Target 2026-07-06_f48409427eded71431feb26da0f839a0_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.4MB
- Sample260706-l2e6dsds8w
- SHA256 c7c0e2702ef2d6660ec4dd81a563679ec85b4ffef9b5eacf41c0a4c95c68a530
- MD5 f48409427eded71431feb26da0f839a0
- SHA1 61537752fda6423f7129d34d40b010844f5a2a77
- SHA512 7ff8fce649e6e9b72ea9ec3c4c0b27e308fd9eb528e9d53cc995138d4264cdf4f67d3c31926959e482caef05784e9304ac91f60ff518ec3f3955a13b4f4400b9
- SSDEEP 12288:jhT1063Oo1NgTQ4i3jeo8SFXI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:jtGGOo1N+5l743TvRk6NwG
- TLSH T15365F11973A50CF9EC73927EC8425646E672BC120761DAEF03A047665F372D0AE3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f48409427eded71431feb26da0f839a0_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f48409427eded71431feb26da0f839a0_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f48409427eded71431feb26da0f839a0_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.4MB
- SHA256 c7c0e2702ef2d6660ec4dd81a563679ec85b4ffef9b5eacf41c0a4c95c68a530
- MD5 f48409427eded71431feb26da0f839a0
- SHA1 61537752fda6423f7129d34d40b010844f5a2a77
- SHA512 7ff8fce649e6e9b72ea9ec3c4c0b27e308fd9eb528e9d53cc995138d4264cdf4f67d3c31926959e482caef05784e9304ac91f60ff518ec3f3955a13b4f4400b9
- SSDEEP 12288:jhT1063Oo1NgTQ4i3jeo8SFXI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:jtGGOo1N+5l743TvRk6NwG
- TLSH T15365F11973A50CF9EC73927EC8425646E672BC120761DAEF03A047665F372D0AE3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1