General
- Target 2026-08-07_11ca5db6691722d902b8dd083db01ff7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 812KB
- Sample260807-qe8lmsywdv
- SHA256 73150001e2894755e1771901ce8da2aec0ace1c09176c8871c4e88747d805345
- MD5 11ca5db6691722d902b8dd083db01ff7
- SHA1 f9c8292a1159f1b75b3a74d736b36a18f73f8fe7
- SHA512 b354cb1cb707e66f2ef631c0a0d4e4c93e4d5d3209749c93a39abf179f3e2bbae0ee532b2819034abaa382a30542c3dfd5c0c1ce9f5d7abd91ade2188dea083d
- SSDEEP 12288:nZZxPwEsHuXzsOpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBEJWgX:njFwVuDsOpayI7qWwfMaCGRdd3aEHX
- TLSH T18E050269BBA108F9EDB581BDCEA3C006D671B8524360DA8F13A486654F633D05E3FF91
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-08-07_11ca5db6691722d902b8dd083db01ff7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 812KB
- SHA256 73150001e2894755e1771901ce8da2aec0ace1c09176c8871c4e88747d805345
- MD5 11ca5db6691722d902b8dd083db01ff7
- SHA1 f9c8292a1159f1b75b3a74d736b36a18f73f8fe7
- SHA512 b354cb1cb707e66f2ef631c0a0d4e4c93e4d5d3209749c93a39abf179f3e2bbae0ee532b2819034abaa382a30542c3dfd5c0c1ce9f5d7abd91ade2188dea083d
- SSDEEP 12288:nZZxPwEsHuXzsOpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBEJWgX:njFwVuDsOpayI7qWwfMaCGRdd3aEHX
- TLSH T18E050269BBA108F9EDB581BDCEA3C006D671B8524360DA8F13A486654F633D05E3FF91
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1