General
- Target 2026-07-14_34003cfc8604b866086bdefa94e478b3_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260714-esnmvags91
- SHA256 6c48855b26a36d869c039b50c6a29640ffc81f71678d5c7402da76ffca372f68
- MD5 34003cfc8604b866086bdefa94e478b3
- SHA1 7b1abfb278ed441993b38472bda4961d23763186
- SHA512 c4f249ed5d8335ac9494dcceb55f8f390b7e38e04e41e269cf18ebc50cb59a6fe63931b12d6e236ebc8eb7f4e3e0c30a7b59c1f364babb4b46cfed2549e780b5
- SSDEEP 49152:rHs5/EaWEzVHEh2bK2pTETMcEn53LhWAhXUr:rHmY2RhN5U
- TLSH T16085BF17B6A600FCD06DC1B8CB169532EAB1B8850F31BADF1290A3192E76EE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_34003cfc8604b866086bdefa94e478b3_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_34003cfc8604b866086bdefa94e478b3_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_34003cfc8604b866086bdefa94e478b3_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 6c48855b26a36d869c039b50c6a29640ffc81f71678d5c7402da76ffca372f68
- MD5 34003cfc8604b866086bdefa94e478b3
- SHA1 7b1abfb278ed441993b38472bda4961d23763186
- SHA512 c4f249ed5d8335ac9494dcceb55f8f390b7e38e04e41e269cf18ebc50cb59a6fe63931b12d6e236ebc8eb7f4e3e0c30a7b59c1f364babb4b46cfed2549e780b5
- SSDEEP 49152:rHs5/EaWEzVHEh2bK2pTETMcEn53LhWAhXUr:rHmY2RhN5U
- TLSH T16085BF17B6A600FCD06DC1B8CB169532EAB1B8850F31BADF1290A3192E76EE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1