General
- Target 2026-07-09_eb70e58217537c9210258d21d892327d_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 812KB
- Sample260709-n8dbgsax4v
- SHA256 0882de8d3ebf8477b3dfddda4711cb7ff54935365d49c90bb39627a00340a47a
- MD5 eb70e58217537c9210258d21d892327d
- SHA1 2b59b29d33e84eda1a0c62a72c2fe7d1fec530c0
- SHA512 6e5d187d54875b78a0393f69951fa0a0f7e0932f67c1e4930e071ba279f0dca3a32cc429481906fa9d17211f042ac7e01f568259544d7a71d89451515ad7eccb
- SSDEEP 24576:9mFwVuDzfIB7weDWJhTXnP+xZovJrchBGdSmt:4FwVuHQB7weDWPLnEOxrtSQ
- TLSH T1A2050279FB600CF9DC6B827DC9229406E672B85553A4D6AF13E046321F633D05E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_eb70e58217537c9210258d21d892327d_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_eb70e58217537c9210258d21d892327d_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 812KB
- SHA256 0882de8d3ebf8477b3dfddda4711cb7ff54935365d49c90bb39627a00340a47a
- MD5 eb70e58217537c9210258d21d892327d
- SHA1 2b59b29d33e84eda1a0c62a72c2fe7d1fec530c0
- SHA512 6e5d187d54875b78a0393f69951fa0a0f7e0932f67c1e4930e071ba279f0dca3a32cc429481906fa9d17211f042ac7e01f568259544d7a71d89451515ad7eccb
- SSDEEP 24576:9mFwVuDzfIB7weDWJhTXnP+xZovJrchBGdSmt:4FwVuHQB7weDWPLnEOxrtSQ
- TLSH T1A2050279FB600CF9DC6B827DC9229406E672B85553A4D6AF13E046321F633D05E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1