General
- Target 2026-07-12_1b89e751892d9f24791c84950360dde3_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- Sample260712-rf14madt7s
- SHA256 00cd22d911c24876db2526a94d2d87f6c7a4f6ca0ba0a09d6d51555759183023
- MD5 1b89e751892d9f24791c84950360dde3
- SHA1 ef092a45c21b3d9594e33ad8e1b0717b6b8883ff
- SHA512 0652230fc7a9221770acdcf3509714e5c3b29467bd6ea1a6d8dda804259c7223367b4bc429f85b0b48ec2d50fbbde3ad42598dd5ed0b6a822e3329d0fbe0f4c2
- SSDEEP 24576:F8x69/QIXWknY6QKTm55L3pnVIJ6ntSrM+SP/:FL9/9WkYSm557JVIJ6tSr6P/
- TLSH T16D05F15976A84CF5EA67C17D89429602E77278090B74DBDF0760027B2F237E0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_1b89e751892d9f24791c84950360dde3_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_1b89e751892d9f24791c84950360dde3_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_1b89e751892d9f24791c84950360dde3_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- SHA256 00cd22d911c24876db2526a94d2d87f6c7a4f6ca0ba0a09d6d51555759183023
- MD5 1b89e751892d9f24791c84950360dde3
- SHA1 ef092a45c21b3d9594e33ad8e1b0717b6b8883ff
- SHA512 0652230fc7a9221770acdcf3509714e5c3b29467bd6ea1a6d8dda804259c7223367b4bc429f85b0b48ec2d50fbbde3ad42598dd5ed0b6a822e3329d0fbe0f4c2
- SSDEEP 24576:F8x69/QIXWknY6QKTm55L3pnVIJ6ntSrM+SP/:FL9/9WkYSm557JVIJ6tSr6P/
- TLSH T16D05F15976A84CF5EA67C17D89429602E77278090B74DBDF0760027B2F237E0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1