General
- Target 2026-07-20_255b13375683621f1440f9f770ceb817_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260720-dys9vady6q
- SHA256 c5b166e14e7c8aeff4d4f3d0edb0d3a94457f0dd270d877348050375a53d056a
- MD5 255b13375683621f1440f9f770ceb817
- SHA1 361a929334405f10dbd5fe025a1e5b5839dcf0a0
- SHA512 afa743d93f113fc0e6643dd9b6f8d6c59ec2a84fd8f19e492ee15bc0834752d0578ce50a561667aadcb76d3e3dc4f5917f704efdb7ff792270cea4f9283ea0ed
- SSDEEP 49152:zHs5/caWEzVHEh2bK2pTETMcy/LpIgpzjGB7N5K7/g:zHmg2Rxxzj1/
- TLSH T16185BF07F69600FCC06DC1B8CB569532EA71B8850F31AAEF1690A7292E77AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_255b13375683621f1440f9f770ceb817_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_255b13375683621f1440f9f770ceb817_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 c5b166e14e7c8aeff4d4f3d0edb0d3a94457f0dd270d877348050375a53d056a
- MD5 255b13375683621f1440f9f770ceb817
- SHA1 361a929334405f10dbd5fe025a1e5b5839dcf0a0
- SHA512 afa743d93f113fc0e6643dd9b6f8d6c59ec2a84fd8f19e492ee15bc0834752d0578ce50a561667aadcb76d3e3dc4f5917f704efdb7ff792270cea4f9283ea0ed
- SSDEEP 49152:zHs5/caWEzVHEh2bK2pTETMcy/LpIgpzjGB7N5K7/g:zHmg2Rxxzj1/
- TLSH T16185BF07F69600FCC06DC1B8CB569532EA71B8850F31AAEF1690A7292E77AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1