General
- Target 2026-08-06_401e76b44a6bb36712ba0074418d5d72_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.9MB
- Sample260806-nv23pazejf
- SHA256 190884a10ca91e2b32d6a19f0ebeaad95459c24dcd215ef08bfeb5cc097b45cd
- MD5 401e76b44a6bb36712ba0074418d5d72
- SHA1 e9a7693e2de74b4498a6b18d8c4c727abdabd326
- SHA512 669cd0b63b9b5107726bec7e86f63738c7781a043d483a3f554f501cbaea9e2fad28114c0119c3a981a5b268a31974480472cb8ede49850d91f7b4e1b23a1442
- SSDEEP 24576:nBYGb8axt3A6nzSp39Xozsr8zbhN6GwXOGIh4:eI8EA6SXozsr8zlLwJIh
- TLSH T1F495E156A7E500B9E1F7E638C9A34A02E77B7C0606B1DB4F03A881771F676509E39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_401e76b44a6bb36712ba0074418d5d72_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_401e76b44a6bb36712ba0074418d5d72_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_401e76b44a6bb36712ba0074418d5d72_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.9MB
- SHA256 190884a10ca91e2b32d6a19f0ebeaad95459c24dcd215ef08bfeb5cc097b45cd
- MD5 401e76b44a6bb36712ba0074418d5d72
- SHA1 e9a7693e2de74b4498a6b18d8c4c727abdabd326
- SHA512 669cd0b63b9b5107726bec7e86f63738c7781a043d483a3f554f501cbaea9e2fad28114c0119c3a981a5b268a31974480472cb8ede49850d91f7b4e1b23a1442
- SSDEEP 24576:nBYGb8axt3A6nzSp39Xozsr8zbhN6GwXOGIh4:eI8EA6SXozsr8zlLwJIh
- TLSH T1F495E156A7E500B9E1F7E638C9A34A02E77B7C0606B1DB4F03A881771F676509E39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1