General
- Target 2026-07-22_be872bda77d2c21f47354d0f29425e5c_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.3MB
- Sample260722-3b2edawgnh
- SHA256 503dfba61fcd34577eb75893de1259152e3c9a9817a304276a126b7e2138180c
- MD5 be872bda77d2c21f47354d0f29425e5c
- SHA1 1db753945996c48a8e2880e2cfdfe28e8eac9967
- SHA512 01c581e8f3d91bfab2b10121d65d760295ebf77cfad49a8054e5b01e153ace7e68ab1c7acbf6696a7a403f21b61e0788da92bf9418bd4053c4aae12df14efd13
- SSDEEP 24576:iQwFAZxP+8GRb8PSHvfru0qsqjnhMgeiCl7G0nehbGZpbD:iQwyD+8GaCrADmg27RnWGj
- TLSH T12555D045629C03E5D4BA8436C5428679E171FC2647A28BDB82B47B6F1F3B5E04F3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_be872bda77d2c21f47354d0f29425e5c_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_be872bda77d2c21f47354d0f29425e5c_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.3MB
- SHA256 503dfba61fcd34577eb75893de1259152e3c9a9817a304276a126b7e2138180c
- MD5 be872bda77d2c21f47354d0f29425e5c
- SHA1 1db753945996c48a8e2880e2cfdfe28e8eac9967
- SHA512 01c581e8f3d91bfab2b10121d65d760295ebf77cfad49a8054e5b01e153ace7e68ab1c7acbf6696a7a403f21b61e0788da92bf9418bd4053c4aae12df14efd13
- SSDEEP 24576:iQwFAZxP+8GRb8PSHvfru0qsqjnhMgeiCl7G0nehbGZpbD:iQwyD+8GaCrADmg27RnWGj
- TLSH T12555D045629C03E5D4BA8436C5428679E171FC2647A28BDB82B47B6F1F3B5E04F3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1