General
- Target 2026-07-14_e303b2c705b837f4731c6a4ae463d20a_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- Sample260714-rrdgpsev8l
- SHA256 2ae03a4f8099b211f30f1d066c8e8d13440263b0f661c5b3e2acc93bddd08a3e
- MD5 e303b2c705b837f4731c6a4ae463d20a
- SHA1 7addd01cc39cd2bae474d9e9509ed544ded5002b
- SHA512 80c319b7a9e763f187d0b50464d97e27372a144e0b69a282bcf0c06ab403b3306aa97a568f4d417ab07e25c833f43fcded9a138b958f9fd9cec9ae01c75943fd
- SSDEEP 49152:r9rSbfkOSAK636TNEybUPeBBaNp5x067ODLNiXicJFFRGNzj3:pG401n7OD7wRGpj3
- TLSH T1D2D59D13F29A01D8E06ED17987069232FA61BC4A1B34B6EF0690B7152E77FE95B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_e303b2c705b837f4731c6a4ae463d20a_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_e303b2c705b837f4731c6a4ae463d20a_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- SHA256 2ae03a4f8099b211f30f1d066c8e8d13440263b0f661c5b3e2acc93bddd08a3e
- MD5 e303b2c705b837f4731c6a4ae463d20a
- SHA1 7addd01cc39cd2bae474d9e9509ed544ded5002b
- SHA512 80c319b7a9e763f187d0b50464d97e27372a144e0b69a282bcf0c06ab403b3306aa97a568f4d417ab07e25c833f43fcded9a138b958f9fd9cec9ae01c75943fd
- SSDEEP 49152:r9rSbfkOSAK636TNEybUPeBBaNp5x067ODLNiXicJFFRGNzj3:pG401n7OD7wRGpj3
- TLSH T1D2D59D13F29A01D8E06ED17987069232FA61BC4A1B34B6EF0690B7152E77FE95B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory