General
- Target 2026-07-10_9da84aa80f230fe44b7d22a67871fc1c_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- Sample260710-matedaat6w
- SHA256 d7d3754863161a10be64be2079e406ef3ffb97526345eb65e14a29036fef37c4
- MD5 9da84aa80f230fe44b7d22a67871fc1c
- SHA1 8c691a43343a71608be0554fbb21d08b9b87af24
- SHA512 f37acbd14320b612882de6027b235590866efd5fea1ef1157b5656df7a243ee0f33b296af9db57a2f8af8e4dd9e1e214f67ec9f91c10d80ac73b7b7521c3da5b
- SSDEEP 24576:HFYGGMrmtkY6nzSp+NYAWqrGSmQJU3s3TvQlDPkB4O3NNYL0:apMPY6JNYAJmQhkD03NGw
- TLSH T15835E10967E500F9E1F7E678C9A64A02F77B7C0616B0DB4F03A885772F672509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_9da84aa80f230fe44b7d22a67871fc1c_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_9da84aa80f230fe44b7d22a67871fc1c_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- SHA256 d7d3754863161a10be64be2079e406ef3ffb97526345eb65e14a29036fef37c4
- MD5 9da84aa80f230fe44b7d22a67871fc1c
- SHA1 8c691a43343a71608be0554fbb21d08b9b87af24
- SHA512 f37acbd14320b612882de6027b235590866efd5fea1ef1157b5656df7a243ee0f33b296af9db57a2f8af8e4dd9e1e214f67ec9f91c10d80ac73b7b7521c3da5b
- SSDEEP 24576:HFYGGMrmtkY6nzSp+NYAWqrGSmQJU3s3TvQlDPkB4O3NNYL0:apMPY6JNYAJmQhkD03NGw
- TLSH T15835E10967E500F9E1F7E678C9A64A02F77B7C0616B0DB4F03A885772F672509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1