General
- Target 2026-07-20_64abbff2fa63acd04e6405c09597a7f6_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260720-dkty8adt9l
- SHA256 c5967aa1b57dedfb27bc1feb6409243e7a70972ee961248fe34ee5a25c1a9e16
- MD5 64abbff2fa63acd04e6405c09597a7f6
- SHA1 126131bc5f13a3ed9cb6b4c8e37c8de184bfb9bd
- SHA512 4c2036537a358f31a890a600439ed0cd056d6f8c67eadcfacaf41871be0aca9ab58cc84ad1c051604582caf94c2743b5c171d1d7c0d5fe73dda3e310d5c07fcb
- SSDEEP 24576:YVT0AYyRE9Wx/tEX6PoC0jIMuBysIEvJm8hxGtJzft2ABX:Y10AYDWxyXGohjIMvsRm8TGD
- TLSH T13475BE0AB2A518EAC2A9C074CE16D1319B61BC4E0BF255FB3991F3D92D36AD07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_64abbff2fa63acd04e6405c09597a7f6_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_64abbff2fa63acd04e6405c09597a7f6_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 c5967aa1b57dedfb27bc1feb6409243e7a70972ee961248fe34ee5a25c1a9e16
- MD5 64abbff2fa63acd04e6405c09597a7f6
- SHA1 126131bc5f13a3ed9cb6b4c8e37c8de184bfb9bd
- SHA512 4c2036537a358f31a890a600439ed0cd056d6f8c67eadcfacaf41871be0aca9ab58cc84ad1c051604582caf94c2743b5c171d1d7c0d5fe73dda3e310d5c07fcb
- SSDEEP 24576:YVT0AYyRE9Wx/tEX6PoC0jIMuBysIEvJm8hxGtJzft2ABX:Y10AYDWxyXGohjIMvsRm8TGD
- TLSH T13475BE0AB2A518EAC2A9C074CE16D1319B61BC4E0BF255FB3991F3D92D36AD07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1