General
- Target 2026-08-05_e7351abd3c20136ea01dd2cc21704f38_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260806-cg2zzs1fma
- SHA256 fb29e523c53697a0490a4ad0cb618d522b56f32f49bcfb1b6f6436c50531cb18
- MD5 e7351abd3c20136ea01dd2cc21704f38
- SHA1 a2fc7dedc1fff8cbe1f3f0f1076822eb2f1fb4e4
- SHA512 1b39894e8e0730d12eddb2bf45dd7d3f365bc66fe2c05a18d2b2bf0064502a379b83026dfe7dbff7941bd350580c1fafea94349628c69e27edfd53243975c80e
- SSDEEP 24576:zf04TmVwLP7DhspWcY/0eaiOpayI7qWwfMaCGRdd3aEHX:zfRMwr7FspHYSpaZtGRddKEHX
- TLSH T16765C01BBAA910FDD069C179CB469232EA71F8420B70B9DF0391D2693E776E05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e7351abd3c20136ea01dd2cc21704f38_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e7351abd3c20136ea01dd2cc21704f38_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e7351abd3c20136ea01dd2cc21704f38_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 fb29e523c53697a0490a4ad0cb618d522b56f32f49bcfb1b6f6436c50531cb18
- MD5 e7351abd3c20136ea01dd2cc21704f38
- SHA1 a2fc7dedc1fff8cbe1f3f0f1076822eb2f1fb4e4
- SHA512 1b39894e8e0730d12eddb2bf45dd7d3f365bc66fe2c05a18d2b2bf0064502a379b83026dfe7dbff7941bd350580c1fafea94349628c69e27edfd53243975c80e
- SSDEEP 24576:zf04TmVwLP7DhspWcY/0eaiOpayI7qWwfMaCGRdd3aEHX:zfRMwr7FspHYSpaZtGRddKEHX
- TLSH T16765C01BBAA910FDD069C179CB469232EA71F8420B70B9DF0391D2693E776E05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1