General
- Target 2026-08-03_f3e82139c0bcc43987531dab4550e7b1_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260804-kw6wgsgd97
- SHA256 456a82dd3f9074c374253d04d25450e1c8b42e2aa95930fc83d9757bf76ea130
- MD5 f3e82139c0bcc43987531dab4550e7b1
- SHA1 b350e9070815c7fe258273aca9f3f05898b0852e
- SHA512 3bca8973ceb059a537110554c81ce94aa0257b293b7deafad24d90fc6e64be3ef90ac8ea12d36782780b2ad71087ccec40b83d7df61c615c04278f38ab851a5a
- SSDEEP 24576:qf/487/ALP7DhspWcY/0eaIPG9wdZt+F7jVgCRUsA7uEcWFwF:qfAKAr7FspHYV4wkF73UaEcWFQ
- TLSH T17A65C00BB6A910FDD06AC139CB469132E671F8461B70B9EF0291D26D3E77AE05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f3e82139c0bcc43987531dab4550e7b1_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f3e82139c0bcc43987531dab4550e7b1_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 456a82dd3f9074c374253d04d25450e1c8b42e2aa95930fc83d9757bf76ea130
- MD5 f3e82139c0bcc43987531dab4550e7b1
- SHA1 b350e9070815c7fe258273aca9f3f05898b0852e
- SHA512 3bca8973ceb059a537110554c81ce94aa0257b293b7deafad24d90fc6e64be3ef90ac8ea12d36782780b2ad71087ccec40b83d7df61c615c04278f38ab851a5a
- SSDEEP 24576:qf/487/ALP7DhspWcY/0eaIPG9wdZt+F7jVgCRUsA7uEcWFwF:qfAKAr7FspHYV4wkF73UaEcWFQ
- TLSH T17A65C00BB6A910FDD06AC139CB469132E671F8461B70B9EF0291D26D3E77AE05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1