General
- Target 2026-08-06_2043e5165be31b1a5ede769b7710dcc7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260806-b8991a1dpb
- SHA256 940841d60cb05be3d7b8dfd384374c5df709c7ad504adac662ab6fc52ac14320
- MD5 2043e5165be31b1a5ede769b7710dcc7
- SHA1 08258116969efd0b16d416038db92c7a6bd5c93d
- SHA512 1cc4bc3e37f8bcc1f03f3da39ba34594ae814a1ddfb70d8fd78c53b8b4df27796cfbe811211cbbd4aa08ef3fb5eeb428ce99eeca0129c12eca26da630c213029
- SSDEEP 24576:gAT0AYy2E9Wx/tEX6PoC0jIMufkrSwVFp6JHYs2DStzbp:gU0AYKWxyXGohjIMCwtSx2mdp
- TLSH T10775BE0BB29118EAD2A9C074CE16D531A762BC4D0BF269FB3581F2D92D36AD07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_2043e5165be31b1a5ede769b7710dcc7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_2043e5165be31b1a5ede769b7710dcc7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_2043e5165be31b1a5ede769b7710dcc7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 940841d60cb05be3d7b8dfd384374c5df709c7ad504adac662ab6fc52ac14320
- MD5 2043e5165be31b1a5ede769b7710dcc7
- SHA1 08258116969efd0b16d416038db92c7a6bd5c93d
- SHA512 1cc4bc3e37f8bcc1f03f3da39ba34594ae814a1ddfb70d8fd78c53b8b4df27796cfbe811211cbbd4aa08ef3fb5eeb428ce99eeca0129c12eca26da630c213029
- SSDEEP 24576:gAT0AYy2E9Wx/tEX6PoC0jIMufkrSwVFp6JHYs2DStzbp:gU0AYKWxyXGohjIMCwtSx2mdp
- TLSH T10775BE0BB29118EAD2A9C074CE16D531A762BC4D0BF269FB3581F2D92D36AD07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1