General
- Target 2026-07-09_a97b216e099d5e7cf36f5ca7ebaa0030_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 812KB
- Sample260709-ryjx3acy7v
- SHA256 6a2181f8eec10572e7771ddc3fc58b5c939bf00a56eebf26c4c07820aef9649e
- MD5 a97b216e099d5e7cf36f5ca7ebaa0030
- SHA1 8b4ad2a3265d70055c46e45f3fe839fb209b7796
- SHA512 2bf398d83e2c5a311f3be80ea029666c719076edc20bc87c449c1eea70840bb21364a4adf03dab50e81050badc3724abf5d5de1ee31998d934cecd9103b0222e
- SSDEEP 12288:sEbxPwEsHuXzTsMSKTNwijYc1qWrIUoxXtatlgSy2F34sIF1gxQRFWo/y:sMFwVuDX3trIXwtaSy2FPI8QRY
- TLSH T169050269F39008F8EC728279CDA2D502D6B1B85143B1D69F13B482259F632E46F3EF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_a97b216e099d5e7cf36f5ca7ebaa0030_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_a97b216e099d5e7cf36f5ca7ebaa0030_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 812KB
- SHA256 6a2181f8eec10572e7771ddc3fc58b5c939bf00a56eebf26c4c07820aef9649e
- MD5 a97b216e099d5e7cf36f5ca7ebaa0030
- SHA1 8b4ad2a3265d70055c46e45f3fe839fb209b7796
- SHA512 2bf398d83e2c5a311f3be80ea029666c719076edc20bc87c449c1eea70840bb21364a4adf03dab50e81050badc3724abf5d5de1ee31998d934cecd9103b0222e
- SSDEEP 12288:sEbxPwEsHuXzTsMSKTNwijYc1qWrIUoxXtatlgSy2F34sIF1gxQRFWo/y:sMFwVuDX3trIXwtaSy2FPI8QRY
- TLSH T169050269F39008F8EC728279CDA2D502D6B1B85143B1D69F13B482259F632E46F3EF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1