General
- Target 2026-07-09_9abfd308d4789de3b1a0d430aaed4358_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- Sample260709-3eq3taby9v
- SHA256 a89f9005c40e19b0fc341fcf136d415dd7f496cbff4a28ea47bca430f358395b
- MD5 9abfd308d4789de3b1a0d430aaed4358
- SHA1 a8ec2002aea05d3456d8f1afb690d21c02804bc2
- SHA512 d3950325afe30cf1d1ab7055a6c43f092cc9649161278a89f1d5c3f3b8011e10d96cf384a4ff351dff0beb4fd908656e07db499772ef73a02a29bd3227dda505
- SSDEEP 49152:W3LhT+avhswJCoLw+OqltEZRPDUHQi3tE1uF+6I4Hiu:W3ksJCEwgIR6n3tkuw6NHi
- TLSH T123859C456E9BC5E9D17BA17FCA460D02D5AEF602071396CB0B905BB53F23AD30D3A3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_9abfd308d4789de3b1a0d430aaed4358_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_9abfd308d4789de3b1a0d430aaed4358_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_9abfd308d4789de3b1a0d430aaed4358_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- SHA256 a89f9005c40e19b0fc341fcf136d415dd7f496cbff4a28ea47bca430f358395b
- MD5 9abfd308d4789de3b1a0d430aaed4358
- SHA1 a8ec2002aea05d3456d8f1afb690d21c02804bc2
- SHA512 d3950325afe30cf1d1ab7055a6c43f092cc9649161278a89f1d5c3f3b8011e10d96cf384a4ff351dff0beb4fd908656e07db499772ef73a02a29bd3227dda505
- SSDEEP 49152:W3LhT+avhswJCoLw+OqltEZRPDUHQi3tE1uF+6I4Hiu:W3ksJCEwgIR6n3tkuw6NHi
- TLSH T123859C456E9BC5E9D17BA17FCA460D02D5AEF602071396CB0B905BB53F23AD30D3A3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1