General
- Target 2026-07-15_5667a898f83245aa0ebd02744cb69208_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- Sample260715-n8evbae16w
- SHA256 9b4b9daa793b0106d9091b1cbc62ac061358bb2e4464455ce10b3aa2d91b386a
- MD5 5667a898f83245aa0ebd02744cb69208
- SHA1 cc400c13c4aa6be12ce1b56c6a268accac366c89
- SHA512 69a94a3c282dabe96a354380be2dd6d895e49392be47aad51ee4c03de74dcaa527356910bf82f70d071f7dbf932c9a1df0a2fdea2778191e6097695978a2c927
- SSDEEP 49152:8vmHGcnO2EvU/bMvo/SHEif5YL8NnjSBjNCWTPp8N7s8SJG8Q/lFTjN4:8TvUko/SzMj0I8NieLm
- TLSH T1D01629ADA6DE40C6C070A4F4CD064795E2F2F854833249CB15E81A1FAE7FEED4E39A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_5667a898f83245aa0ebd02744cb69208_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_5667a898f83245aa0ebd02744cb69208_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_5667a898f83245aa0ebd02744cb69208_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 4.0MB
- SHA256 9b4b9daa793b0106d9091b1cbc62ac061358bb2e4464455ce10b3aa2d91b386a
- MD5 5667a898f83245aa0ebd02744cb69208
- SHA1 cc400c13c4aa6be12ce1b56c6a268accac366c89
- SHA512 69a94a3c282dabe96a354380be2dd6d895e49392be47aad51ee4c03de74dcaa527356910bf82f70d071f7dbf932c9a1df0a2fdea2778191e6097695978a2c927
- SSDEEP 49152:8vmHGcnO2EvU/bMvo/SHEif5YL8NnjSBjNCWTPp8N7s8SJG8Q/lFTjN4:8TvUko/SzMj0I8NieLm
- TLSH T1D01629ADA6DE40C6C070A4F4CD064795E2F2F854833249CB15E81A1FAE7FEED4E39A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1