General
- Target 2026-08-05_d8e1ac24ab0530ece67c21bbe5a7da7a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260805-c817rstygv
- SHA256 8a1f3a27b043e04f2d05aefb022bd0584bf28145b23ea1999b565df34b0473d8
- MD5 d8e1ac24ab0530ece67c21bbe5a7da7a
- SHA1 efd4ea67b9f277f6d918b8cf00bf0e5d6e9f3641
- SHA512 b62f37623ca5e9161efddcbeebb86ddc0b8140019dddd3e670d07444f45f1658fd5f7e3f27d2f55fa0c4e00d7085337c90f84806fdd07e28b7fb4ebad0d7b81c
- SSDEEP 24576:DOiMj0VpLP7DhspWcY/0easWeRq1k5vJysXw3yEFQclYuZg0/Rb:DODupr7FspHYBlo1k7yCKvF3lYuKyb
- TLSH T1AB65D01BBA9910FDD02AC179CB465232EA71B8460F70B9EF039192693E776E05F3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_d8e1ac24ab0530ece67c21bbe5a7da7a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_d8e1ac24ab0530ece67c21bbe5a7da7a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_d8e1ac24ab0530ece67c21bbe5a7da7a_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 8a1f3a27b043e04f2d05aefb022bd0584bf28145b23ea1999b565df34b0473d8
- MD5 d8e1ac24ab0530ece67c21bbe5a7da7a
- SHA1 efd4ea67b9f277f6d918b8cf00bf0e5d6e9f3641
- SHA512 b62f37623ca5e9161efddcbeebb86ddc0b8140019dddd3e670d07444f45f1658fd5f7e3f27d2f55fa0c4e00d7085337c90f84806fdd07e28b7fb4ebad0d7b81c
- SSDEEP 24576:DOiMj0VpLP7DhspWcY/0easWeRq1k5vJysXw3yEFQclYuZg0/Rb:DODupr7FspHYBlo1k7yCKvF3lYuKyb
- TLSH T1AB65D01BBA9910FDD02AC179CB465232EA71B8460F70B9EF039192693E776E05F3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1