General
- Target 2026-07-23_748af4912366c478c2f42ab93bdbc9e5_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.5MB
- Sample260723-l2tnsabe56
- SHA256 3be2f99e91a5e9eab3f645b6e4a767d01e625fbfb9c8f04e0ffb70264eef4c09
- MD5 748af4912366c478c2f42ab93bdbc9e5
- SHA1 eef4e74bea01b2ba245f198187e607b4ac3db70f
- SHA512 ccf0ec8f481e276a7fe9111b5b53482008581645629bd401f32f6bdaf071cfacfcac23ef65d69fa42d72e5653c2cb5cdc8cf4d22ed71ba4330bb6ed57c722013
- SSDEEP 24576:19MaGN0aQ5KdEBfdeisqjnhMgeiCl7G0nehbGZpbD:19HSEH7Dmg27RnWGj
- TLSH T1AE659C4BB39C88DAC46CA03D885B8269FFB2F8115B6187DB6361435E9F772C81E39351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_748af4912366c478c2f42ab93bdbc9e5_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_748af4912366c478c2f42ab93bdbc9e5_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.5MB
- SHA256 3be2f99e91a5e9eab3f645b6e4a767d01e625fbfb9c8f04e0ffb70264eef4c09
- MD5 748af4912366c478c2f42ab93bdbc9e5
- SHA1 eef4e74bea01b2ba245f198187e607b4ac3db70f
- SHA512 ccf0ec8f481e276a7fe9111b5b53482008581645629bd401f32f6bdaf071cfacfcac23ef65d69fa42d72e5653c2cb5cdc8cf4d22ed71ba4330bb6ed57c722013
- SSDEEP 24576:19MaGN0aQ5KdEBfdeisqjnhMgeiCl7G0nehbGZpbD:19HSEH7Dmg27RnWGj
- TLSH T1AE659C4BB39C88DAC46CA03D885B8269FFB2F8115B6187DB6361435E9F772C81E39351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1