General
- Target 2026-08-06_0bff740414268f7f7c1ef8b92b5180bb_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260806-ccx58sfc57
- SHA256 a7cd2c723453a824cf896d664924c740aec9faa6c9f763ec444b40a1e02ea889
- MD5 0bff740414268f7f7c1ef8b92b5180bb
- SHA1 22dcb2d18bdf93fa4d385b611d701b3fb86474c2
- SHA512 602a92f2e0994dc9ddeb5968ea09dddfd5aedd8d56e941eb71ca783674c2b607a81efd78858918d0474aabff1c2853c8a1e02e53f77b58db3408fc0311beadb6
- SSDEEP 49152:VHs5/GaWEzVHEh2bK2pTETMc0paZtGRddKEHX:VHme2R9gtsx
- TLSH T13A85BF07B69600FCD06DC1B8CB569132EAB1B8850F31BADF1290A7692E77AE45F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_0bff740414268f7f7c1ef8b92b5180bb_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_0bff740414268f7f7c1ef8b92b5180bb_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 a7cd2c723453a824cf896d664924c740aec9faa6c9f763ec444b40a1e02ea889
- MD5 0bff740414268f7f7c1ef8b92b5180bb
- SHA1 22dcb2d18bdf93fa4d385b611d701b3fb86474c2
- SHA512 602a92f2e0994dc9ddeb5968ea09dddfd5aedd8d56e941eb71ca783674c2b607a81efd78858918d0474aabff1c2853c8a1e02e53f77b58db3408fc0311beadb6
- SSDEEP 49152:VHs5/GaWEzVHEh2bK2pTETMc0paZtGRddKEHX:VHme2R9gtsx
- TLSH T13A85BF07B69600FCD06DC1B8CB569132EAB1B8850F31BADF1290A7692E77AE45F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1