General
- Target 2026-07-10_5837f19fe47b3e716eacbba8b6daf770_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.7MB
- Sample260710-wj1pgsd14k
- SHA256 c5cde5002f23281165fcd351f7f783b13562c0bca5cc5ec0a9dc04c29077ca36
- MD5 5837f19fe47b3e716eacbba8b6daf770
- SHA1 2cecc57e2053a6a8ef192dcc238227861c90180c
- SHA512 e8a2c544a03afb3bae3a59f44bc08f120ad18da2d93d9cc6dc8862dbe6c191004da2fd912db20eebc4ecad3d1ad42a201d06d9cd2b8dd8ef7e8dca5233fbee95
- SSDEEP 24576:hasjNhgqbmidv3kWtGVvoKFLgYHJWwl24C15rDY:3cGLdvoVQKKYpWwl1+NY
- TLSH T14685D01A62A804F4E1779138C9638606EB72BC5507B1D79F03A4F77B2F336915E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_5837f19fe47b3e716eacbba8b6daf770_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_5837f19fe47b3e716eacbba8b6daf770_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.7MB
- SHA256 c5cde5002f23281165fcd351f7f783b13562c0bca5cc5ec0a9dc04c29077ca36
- MD5 5837f19fe47b3e716eacbba8b6daf770
- SHA1 2cecc57e2053a6a8ef192dcc238227861c90180c
- SHA512 e8a2c544a03afb3bae3a59f44bc08f120ad18da2d93d9cc6dc8862dbe6c191004da2fd912db20eebc4ecad3d1ad42a201d06d9cd2b8dd8ef7e8dca5233fbee95
- SSDEEP 24576:hasjNhgqbmidv3kWtGVvoKFLgYHJWwl24C15rDY:3cGLdvoVQKKYpWwl1+NY
- TLSH T14685D01A62A804F4E1779138C9638606EB72BC5507B1D79F03A4F77B2F336915E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1