General
- Target 2026-08-03_d9fecec8347e4671d091c11f8df85d55_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- Sample260804-ld5q5sbr9z
- SHA256 0368d8b657fc8511e25899a2332e886a611b9e1bc81642e42d2d4a65c50beb20
- MD5 d9fecec8347e4671d091c11f8df85d55
- SHA1 ec3727bc2fcc3ac60d5b0c6c923c40bd76c99a4f
- SHA512 9c8be0a5f759c4427308cc3cc0616530a0e98fa70ed2b97fea2a96dc62b48a3a9255ffbed91a22740e5ed346963d14d84a4dddf75a7224675f6bd6ecefb89a8e
- SSDEEP 49152:ETRdYQ5F4Jc+b01tnAyB63TANQnMED6Te8wT9adt0zYyC:D1PbiHs6ZqktUYyC
- TLSH T165D57C07B3F941ECF0AAE2B8D73156329EB2BC52CB34A5DF125416151E71AE05B38B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_d9fecec8347e4671d091c11f8df85d55_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d9fecec8347e4671d091c11f8df85d55_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- SHA256 0368d8b657fc8511e25899a2332e886a611b9e1bc81642e42d2d4a65c50beb20
- MD5 d9fecec8347e4671d091c11f8df85d55
- SHA1 ec3727bc2fcc3ac60d5b0c6c923c40bd76c99a4f
- SHA512 9c8be0a5f759c4427308cc3cc0616530a0e98fa70ed2b97fea2a96dc62b48a3a9255ffbed91a22740e5ed346963d14d84a4dddf75a7224675f6bd6ecefb89a8e
- SSDEEP 49152:ETRdYQ5F4Jc+b01tnAyB63TANQnMED6Te8wT9adt0zYyC:D1PbiHs6ZqktUYyC
- TLSH T165D57C07B3F941ECF0AAE2B8D73156329EB2BC52CB34A5DF125416151E71AE05B38B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory