General
- Target 2026-07-20_8ae311405d7322b4a59d2e6831817cca_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260720-dc7v4sfy6y
- SHA256 b5a678a03c0f6ad0f8cd563020eb7ec4195b9bc7bae3baf85ece0f09e200a998
- MD5 8ae311405d7322b4a59d2e6831817cca
- SHA1 c9bae594c5381f29a367a729a126d715f261cfde
- SHA512 b2a4aefd649a09481b515e14c7fb8ee2bc75c9b4662113474712a96579468db6329f15369ce6eab9c9ecb30a11c9d1bb6d2ec569ad8d95827176169013642a01
- SSDEEP 24576:eHs5q8dXwwaWnEz0GhxEww3mbQXg5TpTv5uTc/cuzzWLEkgXWHiYKbfZB1v3adCR:eHs5/LaWEzVHEh2bK2pTETMcXcfT1S1
- TLSH T1D385CF07B69600FCD06DC1B8CB169532EA71B8850F31BAEF1790A3292E76AE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_8ae311405d7322b4a59d2e6831817cca_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_8ae311405d7322b4a59d2e6831817cca_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 b5a678a03c0f6ad0f8cd563020eb7ec4195b9bc7bae3baf85ece0f09e200a998
- MD5 8ae311405d7322b4a59d2e6831817cca
- SHA1 c9bae594c5381f29a367a729a126d715f261cfde
- SHA512 b2a4aefd649a09481b515e14c7fb8ee2bc75c9b4662113474712a96579468db6329f15369ce6eab9c9ecb30a11c9d1bb6d2ec569ad8d95827176169013642a01
- SSDEEP 24576:eHs5q8dXwwaWnEz0GhxEww3mbQXg5TpTv5uTc/cuzzWLEkgXWHiYKbfZB1v3adCR:eHs5/LaWEzVHEh2bK2pTETMcXcfT1S1
- TLSH T1D385CF07B69600FCD06DC1B8CB169532EA71B8850F31BAEF1790A3292E76AE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1