General
- Target 2026-07-31_3005e34505b5125196dbb2e4c0555d7d_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- Sample260731-pcsa7ssza1
- SHA256 1283d77790a14f2079ae60aeedd48dcfbe27d2e6c8cf7a5ae382b3fd307eead3
- MD5 3005e34505b5125196dbb2e4c0555d7d
- SHA1 bead8ba8c4215c38b5159c4d668d046405d7efc7
- SHA512 9405b5ad9df2d6ac7b454e0e60f7f83bbfb6607f615f7b0fbaba7c10d4d8de85c3704b661e7d7494160e2d0b09e9eda894662bb53eddfc5ae5627225429ff68e
- SSDEEP 24576:1BYGb8a9t3A6nzSp65SSiVw6uAX8DS52tpz9ZRzbPmSZyo:sI8UA6h5SW6H8DS52tdDpbRZy
- TLSH T15F35E045A7E500F9E1B7E678C9A74A02E77B7C460270DB4F03E881772F676909E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_3005e34505b5125196dbb2e4c0555d7d_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_3005e34505b5125196dbb2e4c0555d7d_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_3005e34505b5125196dbb2e4c0555d7d_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- SHA256 1283d77790a14f2079ae60aeedd48dcfbe27d2e6c8cf7a5ae382b3fd307eead3
- MD5 3005e34505b5125196dbb2e4c0555d7d
- SHA1 bead8ba8c4215c38b5159c4d668d046405d7efc7
- SHA512 9405b5ad9df2d6ac7b454e0e60f7f83bbfb6607f615f7b0fbaba7c10d4d8de85c3704b661e7d7494160e2d0b09e9eda894662bb53eddfc5ae5627225429ff68e
- SSDEEP 24576:1BYGb8a9t3A6nzSp65SSiVw6uAX8DS52tpz9ZRzbPmSZyo:sI8UA6h5SW6H8DS52tdDpbRZy
- TLSH T15F35E045A7E500F9E1B7E678C9A74A02E77B7C460270DB4F03E881772F676909E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1