General
- Target 2026-07-10_95ae0a8188ac3b38a7fb2f4b03fd30bb_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- Sample260710-mbvntshw4l
- SHA256 0ddfd3250d5c4bd69b918c72079e087a5684667545895246d64a2adae932e008
- MD5 95ae0a8188ac3b38a7fb2f4b03fd30bb
- SHA1 aa20af8fd8314407b2ee5623bd40d0d37dce0b3d
- SHA512 d559c637aecebaf76f6210018200065464d4bf44a1034fed13f1b3ba48047e2e3b6eaa99558a5824e74d5006347004a909d7d9483f6f323a7b38bd421ffebfa7
- SSDEEP 24576:OBYGb8a0t3A6nzSpYyxknw4FYnshx8OfVe247:tI8VA6Sx4x8EVep
- TLSH T12F95D019A7E900F8E1B7E674C9A35A02E77B7C054670D74F03E8917B2F636509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_95ae0a8188ac3b38a7fb2f4b03fd30bb_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_95ae0a8188ac3b38a7fb2f4b03fd30bb_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_95ae0a8188ac3b38a7fb2f4b03fd30bb_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- SHA256 0ddfd3250d5c4bd69b918c72079e087a5684667545895246d64a2adae932e008
- MD5 95ae0a8188ac3b38a7fb2f4b03fd30bb
- SHA1 aa20af8fd8314407b2ee5623bd40d0d37dce0b3d
- SHA512 d559c637aecebaf76f6210018200065464d4bf44a1034fed13f1b3ba48047e2e3b6eaa99558a5824e74d5006347004a909d7d9483f6f323a7b38bd421ffebfa7
- SSDEEP 24576:OBYGb8a0t3A6nzSpYyxknw4FYnshx8OfVe247:tI8VA6Sx4x8EVep
- TLSH T12F95D019A7E900F8E1B7E674C9A35A02E77B7C054670D74F03E8917B2F636509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1