General
- Target 2026-08-04_706597848a54fbe667869318102ef2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.7MB
- Sample260804-stnk5atbrh
- SHA256 fbae583f047f556d0ae1fd6dd4b2447aad8ac8b30a4d1a8b87923fd8937a13c7
- MD5 706597848a54fbe667869318102ef2fd
- SHA1 8dd927e34325d5a1dd0461decc4e75b4f7a51fb3
- SHA512 bc2b8cdfac51505e926961b3c8c1bd8b213908f47e7f72f7290cf9bd7e45df3aec4cc0769ffbd82aab90f06cb54ab39f705c0ed5f9503722eebe97339ca1fdeb
- SSDEEP 24576:eBYGb8ayt3A6nzSpE/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:dI8nA6dLNiXicJFFRGNzj3
- TLSH T13185D05567E900B8E1F7E538C9A34902F77B7C054270DA8F03A8957B2F776909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_706597848a54fbe667869318102ef2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_706597848a54fbe667869318102ef2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_706597848a54fbe667869318102ef2fd_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.7MB
- SHA256 fbae583f047f556d0ae1fd6dd4b2447aad8ac8b30a4d1a8b87923fd8937a13c7
- MD5 706597848a54fbe667869318102ef2fd
- SHA1 8dd927e34325d5a1dd0461decc4e75b4f7a51fb3
- SHA512 bc2b8cdfac51505e926961b3c8c1bd8b213908f47e7f72f7290cf9bd7e45df3aec4cc0769ffbd82aab90f06cb54ab39f705c0ed5f9503722eebe97339ca1fdeb
- SSDEEP 24576:eBYGb8ayt3A6nzSpE/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:dI8nA6dLNiXicJFFRGNzj3
- TLSH T13185D05567E900B8E1F7E538C9A34902F77B7C054270DA8F03A8957B2F776909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1