General
- Target 2026-07-14_c116da6d146bca3ae7e52a1bf441357c_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- Sample260714-dlynssft2s
- SHA256 02bbf90d763c2239421029f5c089bc2762aec4e3e36f01a7fee032cd0953de7d
- MD5 c116da6d146bca3ae7e52a1bf441357c
- SHA1 3a6509d50208f1843edf8f4915a3cf6c0b4305a9
- SHA512 71aa33f2c10700174d885b0ab85c718342727e9ade9455186bd128dff402739d2498ff24130eb310403c84ddec764650ac17f712c207ad68519575cf217dc600
- SSDEEP 24576:i/YG84y5t3A6nzSpzKppMUwACBSeuhnV5pF+hC4IMBDVz:bn4IA6qKppM8Coe45DYbhz
- TLSH T10735E11567E904B8E1B7D678C8A74602E77B7C064271DB4F03E8927B2F672909E39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_c116da6d146bca3ae7e52a1bf441357c_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_c116da6d146bca3ae7e52a1bf441357c_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_c116da6d146bca3ae7e52a1bf441357c_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- SHA256 02bbf90d763c2239421029f5c089bc2762aec4e3e36f01a7fee032cd0953de7d
- MD5 c116da6d146bca3ae7e52a1bf441357c
- SHA1 3a6509d50208f1843edf8f4915a3cf6c0b4305a9
- SHA512 71aa33f2c10700174d885b0ab85c718342727e9ade9455186bd128dff402739d2498ff24130eb310403c84ddec764650ac17f712c207ad68519575cf217dc600
- SSDEEP 24576:i/YG84y5t3A6nzSpzKppMUwACBSeuhnV5pF+hC4IMBDVz:bn4IA6qKppM8Coe45DYbhz
- TLSH T10735E11567E904B8E1B7D678C8A74602E77B7C064271DB4F03E8927B2F672909E39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1