General
- Target 2026-07-12_1209ae22f182e9d049eb6b589f514e53_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- Sample260712-rlpyjsdv6s
- SHA256 aee96f093a3a9fdb2566d74620291bfe2d18ff67de8cd8f8465cbe62601d6882
- MD5 1209ae22f182e9d049eb6b589f514e53
- SHA1 fb67e6ee1dcdfd98abfa7d66e5309eb800860608
- SHA512 8ff9a72e8371a1b7a89098989f7a9d5e62d23f271eae65504b9e9575c93e30bc3a6cb2028b6c1357d347540f622e222ee515231244b02d3c2a7943c9aac732f5
- SSDEEP 12288:ZhIy3npArW8wSZe0IvIZPXhonJ85VSc8OdSlgVIMIhkgsDu3iZ6ODNlnRSh9zsTE:Zh76BwLW5hXSHg/ehHeRqh9zS
- TLSH T16105F14573E88CF9E523C17D89928606E77178450B35DBDF03A4427B6F236E2AE39B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_1209ae22f182e9d049eb6b589f514e53_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_1209ae22f182e9d049eb6b589f514e53_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- SHA256 aee96f093a3a9fdb2566d74620291bfe2d18ff67de8cd8f8465cbe62601d6882
- MD5 1209ae22f182e9d049eb6b589f514e53
- SHA1 fb67e6ee1dcdfd98abfa7d66e5309eb800860608
- SHA512 8ff9a72e8371a1b7a89098989f7a9d5e62d23f271eae65504b9e9575c93e30bc3a6cb2028b6c1357d347540f622e222ee515231244b02d3c2a7943c9aac732f5
- SSDEEP 12288:ZhIy3npArW8wSZe0IvIZPXhonJ85VSc8OdSlgVIMIhkgsDu3iZ6ODNlnRSh9zsTE:Zh76BwLW5hXSHg/ehHeRqh9zS
- TLSH T16105F14573E88CF9E523C17D89928606E77178450B35DBDF03A4427B6F236E2AE39B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1