General
- Target 2026-07-18_19f85fb5f1621eb3dd561ee6b0a3bcdc_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- Sample260718-kme2eaes7j
- SHA256 5c91bc38f351526f24b7289b7ee26fcdedc2fbb710c596816bab8c91c85271ff
- MD5 19f85fb5f1621eb3dd561ee6b0a3bcdc
- SHA1 ac1a11d56cc550e82fb2f82dc59d1e8f0c3737ef
- SHA512 7e86f2a32ca19001d2cde0c68cfc8d5ae23ebad3a672b1f84f1970ebf75cd29ed9f2c981e23c48c13b235c7bf77fd6254d8c25db8bec94bf26328bccf95a50f2
- SSDEEP 12288:md9b3npArWvypuj6PoGX11bqtq2nKncB/85O8mICpgllz+4XY1fb/fTnGQX:mdx6Syplt3qs2MpfvlY1D/fjxX
- TLSH T1E305F10A77990CF9D92BC17D8D568606E2B278050731CADB47A1427B6F237E0AE39F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_19f85fb5f1621eb3dd561ee6b0a3bcdc_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_19f85fb5f1621eb3dd561ee6b0a3bcdc_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_19f85fb5f1621eb3dd561ee6b0a3bcdc_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- SHA256 5c91bc38f351526f24b7289b7ee26fcdedc2fbb710c596816bab8c91c85271ff
- MD5 19f85fb5f1621eb3dd561ee6b0a3bcdc
- SHA1 ac1a11d56cc550e82fb2f82dc59d1e8f0c3737ef
- SHA512 7e86f2a32ca19001d2cde0c68cfc8d5ae23ebad3a672b1f84f1970ebf75cd29ed9f2c981e23c48c13b235c7bf77fd6254d8c25db8bec94bf26328bccf95a50f2
- SSDEEP 12288:md9b3npArWvypuj6PoGX11bqtq2nKncB/85O8mICpgllz+4XY1fb/fTnGQX:mdx6Syplt3qs2MpfvlY1D/fjxX
- TLSH T1E305F10A77990CF9D92BC17D8D568606E2B278050731CADB47A1427B6F237E0AE39F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1