General
- Target 2026-08-03_ba7583b3d5197c8d0537dd16bdf73292_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260804-l2dbssxcqb
- SHA256 0342af958f371480cdbcabfd18dd5bbe80955aa9306c780ff66b2f63a11a3241
- MD5 ba7583b3d5197c8d0537dd16bdf73292
- SHA1 c2f0285a6ad2f5ed53f0fa0d259f6fd664152128
- SHA512 81da09f4ded15c2916e3052bd4341e297b18618a67355b52e78798a7636ed465a9d01a26e4f461ce1e7a610f6c6a9633660ea6240ce27e93562506db6e1b9cc5
- SSDEEP 49152:1Hs5/KaWEzVH9hwbK2pTETMcwU7mqhH3j:1Hmf2RS7moXj
- TLSH T18385BF07B69500FCD06EC1B8CB169532EAB1B8450F71BAEF1390A7292E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_ba7583b3d5197c8d0537dd16bdf73292_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ba7583b3d5197c8d0537dd16bdf73292_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 0342af958f371480cdbcabfd18dd5bbe80955aa9306c780ff66b2f63a11a3241
- MD5 ba7583b3d5197c8d0537dd16bdf73292
- SHA1 c2f0285a6ad2f5ed53f0fa0d259f6fd664152128
- SHA512 81da09f4ded15c2916e3052bd4341e297b18618a67355b52e78798a7636ed465a9d01a26e4f461ce1e7a610f6c6a9633660ea6240ce27e93562506db6e1b9cc5
- SSDEEP 49152:1Hs5/KaWEzVH9hwbK2pTETMcwU7mqhH3j:1Hmf2RS7moXj
- TLSH T18385BF07B69500FCD06EC1B8CB169532EAB1B8450F71BAEF1390A7292E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1