General
- Target 2026-07-07_2348448cc7a55b5976bb9edb65ef3488_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.2MB
- Sample260707-rt6w2afv4s
- SHA256 d5033c83810cfdff11ab2b25fd15109ec3092149c516aa79131ac51b7b8b9619
- MD5 2348448cc7a55b5976bb9edb65ef3488
- SHA1 67f173d3ad92f6cc702dde4ceabe70f33dc6f8a2
- SHA512 3db828e0265f12d44a408c5d6aeedbe9b6edc6615562aec7534619573baec6f36f4f15984a4d00690f04c7b3ac207767e1320c059a76e8d9dc37ad2c38ea0e22
- SSDEEP 98304:jlgck0chRPQkmBPAf1XtgmvnsHQQbtSR:jiw3CdXwHbq
- TLSH T12E465C93F35111F9D00EC8B84B6D5622D5757C8A4B31A3EF06E83B661E76AD82B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_2348448cc7a55b5976bb9edb65ef3488_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_2348448cc7a55b5976bb9edb65ef3488_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 5.2MB
- SHA256 d5033c83810cfdff11ab2b25fd15109ec3092149c516aa79131ac51b7b8b9619
- MD5 2348448cc7a55b5976bb9edb65ef3488
- SHA1 67f173d3ad92f6cc702dde4ceabe70f33dc6f8a2
- SHA512 3db828e0265f12d44a408c5d6aeedbe9b6edc6615562aec7534619573baec6f36f4f15984a4d00690f04c7b3ac207767e1320c059a76e8d9dc37ad2c38ea0e22
- SSDEEP 98304:jlgck0chRPQkmBPAf1XtgmvnsHQQbtSR:jiw3CdXwHbq
- TLSH T12E465C93F35111F9D00EC8B84B6D5622D5757C8A4B31A3EF06E83B661E76AD82B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1