General
- Target 2026-08-05_53a7fd4e17a72b1cd58756cb39d5e355_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260806-cq85nafd29
- SHA256 f6358905e5c6fae925ac5cb9c16a687c7fd529f5e7233e2d263b52aef3a7bca4
- MD5 53a7fd4e17a72b1cd58756cb39d5e355
- SHA1 74f7e7196e664e174b5449cc18c7e43549c72eb0
- SHA512 5075883b31ad61f36c46dd355b383d4aab39852f687aaac2eec04678bbcf067324d0cf075d03f2155fcb2932da9b1227d861121b7201caac02bba993eba2649d
- SSDEEP 24576:FHs5q8dXY3aWnEz0GhxEww3mbQXg5TpTv5uTc/cuFzRTTxH2qjYXzGAiGFn4w7z:FHs5/EaWEzVHEh2bK2pTETMcaFYXLFj
- TLSH T19C85CF07B69600FCD06DC1B8CB169532EAB1B8850F31BADF1690A7292F76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_53a7fd4e17a72b1cd58756cb39d5e355_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_53a7fd4e17a72b1cd58756cb39d5e355_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 f6358905e5c6fae925ac5cb9c16a687c7fd529f5e7233e2d263b52aef3a7bca4
- MD5 53a7fd4e17a72b1cd58756cb39d5e355
- SHA1 74f7e7196e664e174b5449cc18c7e43549c72eb0
- SHA512 5075883b31ad61f36c46dd355b383d4aab39852f687aaac2eec04678bbcf067324d0cf075d03f2155fcb2932da9b1227d861121b7201caac02bba993eba2649d
- SSDEEP 24576:FHs5q8dXY3aWnEz0GhxEww3mbQXg5TpTv5uTc/cuFzRTTxH2qjYXzGAiGFn4w7z:FHs5/EaWEzVHEh2bK2pTETMcaFYXLFj
- TLSH T19C85CF07B69600FCD06DC1B8CB169532EAB1B8850F31BADF1690A7292F76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1