General
- Target 2026-07-17_3c8ee0107022dd7104bab3ea508fa176_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260717-j4v9aafs8l
- SHA256 e8b278d211703128ef3c6699eca62a84ee1e3d8bbc50c2e9f5e09e2e712cc9e8
- MD5 3c8ee0107022dd7104bab3ea508fa176
- SHA1 5c33a5db4a2635fc9b83c943c7d1bbaeca831263
- SHA512 0688246956824bdca249be0835ddeb4fbfb6e00d65ae893308e5c8f378af849448434cd3ed3a352bed9df0492caa8508fc0c8f5a45c39481c75f9f7cf9edff3c
- SSDEEP 49152:RHlA/EaWEzVHEh2bK2pTETMcgVbh/vAqslUoq:RHuY2RUhlUoq
- TLSH T1A885CF07F69600FCD06DC1B8CB169532EAB1B8850F71BADF1690A3292E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_3c8ee0107022dd7104bab3ea508fa176_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_3c8ee0107022dd7104bab3ea508fa176_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_3c8ee0107022dd7104bab3ea508fa176_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 e8b278d211703128ef3c6699eca62a84ee1e3d8bbc50c2e9f5e09e2e712cc9e8
- MD5 3c8ee0107022dd7104bab3ea508fa176
- SHA1 5c33a5db4a2635fc9b83c943c7d1bbaeca831263
- SHA512 0688246956824bdca249be0835ddeb4fbfb6e00d65ae893308e5c8f378af849448434cd3ed3a352bed9df0492caa8508fc0c8f5a45c39481c75f9f7cf9edff3c
- SSDEEP 49152:RHlA/EaWEzVHEh2bK2pTETMcgVbh/vAqslUoq:RHuY2RUhlUoq
- TLSH T1A885CF07F69600FCD06DC1B8CB169532EAB1B8850F71BADF1690A3292E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1