General
- Target 2026-07-10_9e0dbf7dee489b48daaae7b5a7f274ae_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 4.7MB
- Sample260710-dabpwsdv2y
- SHA256 faab7c20eeb91ca479f5f024ee677377a51ed8a7b1e9e85934af958105a8b734
- MD5 9e0dbf7dee489b48daaae7b5a7f274ae
- SHA1 dfd1ade48f37e5b5955b0b94afc42b2c15628f0b
- SHA512 120994adc6a341e8d2430851bd4fa29c351b7c939343ab6f86e3cc46e8c741ad7417ace8c1563b5c77f48ca79b35122b81e86d3920eb55a6ccb2cda4c5efeb81
- SSDEEP 49152:dR4OWAXbQZC8OW1/rN1RHHEtB9zd2CBJaLnIdyCYuewuKwPlUmi3IkC4ICYSZbSy:YEtf5BJaL+8SkD527BWG
- TLSH T1A0367D13F2E941D8F0AAE2749B365332EE72BC568F31A5DF064036151E76EE05B38B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_9e0dbf7dee489b48daaae7b5a7f274ae_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_9e0dbf7dee489b48daaae7b5a7f274ae_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 4.7MB
- SHA256 faab7c20eeb91ca479f5f024ee677377a51ed8a7b1e9e85934af958105a8b734
- MD5 9e0dbf7dee489b48daaae7b5a7f274ae
- SHA1 dfd1ade48f37e5b5955b0b94afc42b2c15628f0b
- SHA512 120994adc6a341e8d2430851bd4fa29c351b7c939343ab6f86e3cc46e8c741ad7417ace8c1563b5c77f48ca79b35122b81e86d3920eb55a6ccb2cda4c5efeb81
- SSDEEP 49152:dR4OWAXbQZC8OW1/rN1RHHEtB9zd2CBJaLnIdyCYuewuKwPlUmi3IkC4ICYSZbSy:YEtf5BJaL+8SkD527BWG
- TLSH T1A0367D13F2E941D8F0AAE2749B365332EE72BC568F31A5DF064036151E76EE05B38B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1