General
- Target 2026-07-28_aec4812729316f87ba2a011c3d8c3d10_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.7MB
- Sample260728-p2cl2shc66
- SHA256 9c01aff96d03fbd12abc47cfc0336e47d449fdbfe559027b5784d7b41a4171cc
- MD5 aec4812729316f87ba2a011c3d8c3d10
- SHA1 87127ff5e1e16e7de2d91e3aa735250844a3b166
- SHA512 ac50f680cf6f7c4e5d41f960ee6c42f4ba99d4fb4251c3a2dc5acee06254611fc175c0eb0e8e107dae918ad1e1d8968c6ff0c3ae1ed09012206e907945f6be3a
- SSDEEP 24576:FD2dDlG3hXhN2jzWDwCmTPPk/z5Zf5hz0dNUX:oo3p3VDwCmTPc/lZfuN4
- TLSH T15E85E08AB39406F9D177D278C9520B12F6B2B8495721A38F03B4977A1F237A25D7F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_aec4812729316f87ba2a011c3d8c3d10_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_aec4812729316f87ba2a011c3d8c3d10_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.7MB
- SHA256 9c01aff96d03fbd12abc47cfc0336e47d449fdbfe559027b5784d7b41a4171cc
- MD5 aec4812729316f87ba2a011c3d8c3d10
- SHA1 87127ff5e1e16e7de2d91e3aa735250844a3b166
- SHA512 ac50f680cf6f7c4e5d41f960ee6c42f4ba99d4fb4251c3a2dc5acee06254611fc175c0eb0e8e107dae918ad1e1d8968c6ff0c3ae1ed09012206e907945f6be3a
- SSDEEP 24576:FD2dDlG3hXhN2jzWDwCmTPPk/z5Zf5hz0dNUX:oo3p3VDwCmTPc/lZfuN4
- TLSH T15E85E08AB39406F9D177D278C9520B12F6B2B8495721A38F03B4977A1F237A25D7F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1