General
- Target 2026-07-22_26f9e7c8b1cb929ab3b2f65ce40853a9_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.3MB
- Sample260723-akansseb89
- SHA256 c564a405dca57c443c769d5ffcf9e29889646b1fe4df0f97b2307cf43f9f3a31
- MD5 26f9e7c8b1cb929ab3b2f65ce40853a9
- SHA1 d20074b8e550500cacf64e624b43c8bd8f5b1fb9
- SHA512 f42b47d054de9ffa11411bf36575a0b67e3cdca5eabd28193a67eea452fecd62ea07c32e2390bcd3eab6bfd2ff1ca27f1cb06686072ba1c7ffe4e37f7702638c
- SSDEEP 24576:3QwFAZxP+8GRb8PSHvfru0qsqjnhMgeiCl7G0nehbGZpbD:3QwyD+8GaCrIDmg27RnWGj
- TLSH T1C655D045629C03E5D4BA8436C5428679E171FC2647A28BDB82B47B6F1F3B5E04F3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_26f9e7c8b1cb929ab3b2f65ce40853a9_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_26f9e7c8b1cb929ab3b2f65ce40853a9_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_26f9e7c8b1cb929ab3b2f65ce40853a9_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.3MB
- SHA256 c564a405dca57c443c769d5ffcf9e29889646b1fe4df0f97b2307cf43f9f3a31
- MD5 26f9e7c8b1cb929ab3b2f65ce40853a9
- SHA1 d20074b8e550500cacf64e624b43c8bd8f5b1fb9
- SHA512 f42b47d054de9ffa11411bf36575a0b67e3cdca5eabd28193a67eea452fecd62ea07c32e2390bcd3eab6bfd2ff1ca27f1cb06686072ba1c7ffe4e37f7702638c
- SSDEEP 24576:3QwFAZxP+8GRb8PSHvfru0qsqjnhMgeiCl7G0nehbGZpbD:3QwyD+8GaCrIDmg27RnWGj
- TLSH T1C655D045629C03E5D4BA8436C5428679E171FC2647A28BDB82B47B6F1F3B5E04F3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1