General
- Target 2026-07-20_68486c09e6f76a5fb53c793dc0a4c573_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260720-dj287sf14x
- SHA256 0ef504a2621b02d8e1ac5192eade1a14677c063def6ce8357fa1fa55eecfa040
- MD5 68486c09e6f76a5fb53c793dc0a4c573
- SHA1 b09fe97ab7c4a7160250f0d2d624f613a7b7425a
- SHA512 9c5964d622e9f710e20466cfd7d39529e65a9cf842a982effe615241f9cd540c71ab56c2f7abd46b6a10ef38b2fa20fefae463ba60a98f595df41c470cd0c7de
- SSDEEP 24576:mVp0+KyRE9Wx/tEX6PoC0jIMujWLEkgXWHiYKbfZB1v3adCMW:mP0+KDWxyXGohjIMncfT1S1
- TLSH T18675AE0BB2A518EAC2A5C074CE16C531A761BC4D0BF269FB3591F2D92E36AD07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_68486c09e6f76a5fb53c793dc0a4c573_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_68486c09e6f76a5fb53c793dc0a4c573_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_68486c09e6f76a5fb53c793dc0a4c573_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 0ef504a2621b02d8e1ac5192eade1a14677c063def6ce8357fa1fa55eecfa040
- MD5 68486c09e6f76a5fb53c793dc0a4c573
- SHA1 b09fe97ab7c4a7160250f0d2d624f613a7b7425a
- SHA512 9c5964d622e9f710e20466cfd7d39529e65a9cf842a982effe615241f9cd540c71ab56c2f7abd46b6a10ef38b2fa20fefae463ba60a98f595df41c470cd0c7de
- SSDEEP 24576:mVp0+KyRE9Wx/tEX6PoC0jIMujWLEkgXWHiYKbfZB1v3adCMW:mP0+KDWxyXGohjIMncfT1S1
- TLSH T18675AE0BB2A518EAC2A5C074CE16C531A761BC4D0BF269FB3591F2D92E36AD07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1