General
- Target 2026-07-09_7e460c51b57555c39b81a8ada7611d8e_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- Sample260709-pwxp2abx71
- SHA256 d802bc157abec6d2c979227a5c9c3f28e0f7f7a37b8de212685d7b190402b1cc
- MD5 7e460c51b57555c39b81a8ada7611d8e
- SHA1 b94896418c62d97b851740f3cc3664b1443fc161
- SHA512 b58369d9e94d1f2b485384c368a59b3176f888c2cef98543ea300f707aa3a5116b58d473b1b6dea5aace1b7444fb26bb6ae2c38971b531fcd604cd50fe02797c
- SSDEEP 49152:X59PYHvI7wi/zIKuLFrFXlMWGxbgtke1hUPvRaraRmx5:XGgzIKgMUr12PvRarGu
- TLSH T1F1A5AD03F6D941E8D06EC1748B4A9132EA62BC4A1F24B6DF0790B7592E77AE46F3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_7e460c51b57555c39b81a8ada7611d8e_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_7e460c51b57555c39b81a8ada7611d8e_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- SHA256 d802bc157abec6d2c979227a5c9c3f28e0f7f7a37b8de212685d7b190402b1cc
- MD5 7e460c51b57555c39b81a8ada7611d8e
- SHA1 b94896418c62d97b851740f3cc3664b1443fc161
- SHA512 b58369d9e94d1f2b485384c368a59b3176f888c2cef98543ea300f707aa3a5116b58d473b1b6dea5aace1b7444fb26bb6ae2c38971b531fcd604cd50fe02797c
- SSDEEP 49152:X59PYHvI7wi/zIKuLFrFXlMWGxbgtke1hUPvRaraRmx5:XGgzIKgMUr12PvRarGu
- TLSH T1F1A5AD03F6D941E8D06EC1748B4A9132EA62BC4A1F24B6DF0790B7592E77AE46F3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1