General
- Target 2026-07-14_04d63cfd395f3fb78babf11c8ca808b4_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260714-fatltaev5j
- SHA256 56439c4ecf8fe4e64b63e35dfb43b0721dc688d37c65b086feead8ffb6233949
- MD5 04d63cfd395f3fb78babf11c8ca808b4
- SHA1 3add5ccf8c0e39f60d1347a4af939333c35b6a3c
- SHA512 55f03bede69848004b413ce01cb3f86072f4edb0f3fb18336daba5c4430958aced687bbbc8e831a59cce3ea514ac5f3e4626634ca50c06b04308df83cca7aeef
- SSDEEP 49152:VHs5/FaWEzVHEh2bK2pTETMchKppM8Coe45DYbhz:VHm52RtXnCaIhz
- TLSH T16585CF07B69600FCD06DC1B8CB169132EAB1B8850F21BADF1790A7692E77AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_04d63cfd395f3fb78babf11c8ca808b4_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_04d63cfd395f3fb78babf11c8ca808b4_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 56439c4ecf8fe4e64b63e35dfb43b0721dc688d37c65b086feead8ffb6233949
- MD5 04d63cfd395f3fb78babf11c8ca808b4
- SHA1 3add5ccf8c0e39f60d1347a4af939333c35b6a3c
- SHA512 55f03bede69848004b413ce01cb3f86072f4edb0f3fb18336daba5c4430958aced687bbbc8e831a59cce3ea514ac5f3e4626634ca50c06b04308df83cca7aeef
- SSDEEP 49152:VHs5/FaWEzVHEh2bK2pTETMchKppM8Coe45DYbhz:VHm52RtXnCaIhz
- TLSH T16585CF07B69600FCD06DC1B8CB169132EAB1B8850F21BADF1790A7692E77AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1