General
- Target 2026-07-31_18d9a19c1da06f5d2f8adaa3c73d4d9b_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260731-d1lb1sam5s
- SHA256 6d6bb8da7b9d2fade8a67fc1d70c5504097016d2a8ac488eac9ecbe530eab486
- MD5 18d9a19c1da06f5d2f8adaa3c73d4d9b
- SHA1 a08ee9d79dac085923d67bc2a2869c241d6c9221
- SHA512 a6abd20de15accef7c66a1aab348ba1739a681dce3fa96c55dde6ca2b98e1dbf9bc29cfb5741ccb23dd7225c91eaa4622ecbf989c520f9ca5d0e5063cb1d7970
- SSDEEP 49152:FHs5/EaWEzVHEh2bK2pTETMcH1Hadt0zYyC:FHmI2RWktUYyC
- TLSH T18C85CF07B69600FCD06DC1B8CB169132EAB1B8850F71BADF1290A7692E77AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_18d9a19c1da06f5d2f8adaa3c73d4d9b_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_18d9a19c1da06f5d2f8adaa3c73d4d9b_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 6d6bb8da7b9d2fade8a67fc1d70c5504097016d2a8ac488eac9ecbe530eab486
- MD5 18d9a19c1da06f5d2f8adaa3c73d4d9b
- SHA1 a08ee9d79dac085923d67bc2a2869c241d6c9221
- SHA512 a6abd20de15accef7c66a1aab348ba1739a681dce3fa96c55dde6ca2b98e1dbf9bc29cfb5741ccb23dd7225c91eaa4622ecbf989c520f9ca5d0e5063cb1d7970
- SSDEEP 49152:FHs5/EaWEzVHEh2bK2pTETMcH1Hadt0zYyC:FHmI2RWktUYyC
- TLSH T18C85CF07B69600FCD06DC1B8CB169132EAB1B8850F71BADF1290A7692E77AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1